Log in Start free

Vulnerability · Published Mar 27, 2025 · Assigned by Linux

CVE-2023-53000netlink: prevent potential spectre v1 gadgets

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 12% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.2%top 87.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated from __nla_validate_parse() or validate_nla() u16 type = nla_type(nla); if (type == 0 || type > maxtype) { /* error or continue */ } @type is then used as an array index and can be used as a Spectre v1 gadget. array_index_nospec() can be used to prevent leaking content of kernel memory to malicious users. This should take care of vast majority of netlink uses, but an audit is needed to take care of others where validation is not yet centralized in core netlink functions.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.11-1DEBIAN-CVE-2023-53000
Debian:13linux6.1.11-1DEBIAN-CVE-2023-53000
Debian:14linux6.1.11-1DEBIAN-CVE-2023-53000
Ubuntu:22.04:LTSlinux5.15.0-70.77UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-aws5.15.0-1034.38UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure5.15.0-1036.43UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1036.43.1UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-gcp5.15.0-1032.40UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-gke5.15.0-1031.36UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1018.23UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-ibm5.15.0-1028.31UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1028.33UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-kvm5.15.0-1031.36UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-70.77UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1023.23UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-oracle5.15.0-1033.39UBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-raspi5.15.0-1027.29UBUNTU-CVE-2023-53000
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53000
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53000
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53000

Affected products (as reported)

VendorProductVersions
Linux Linux bfa83a9e03cf8d501c6272999843470afecb32ed – before 3e5082b1c66c7783fbcd79b5b178573230e528ffbfa83a9e03cf8d501c6272999843470afecb32ed – before 539ca5dcbc91134bbe2c45677811c31d8b030d2dbfa83a9e03cf8d501c6272999843470afecb32ed – before 41b74e95f297ac360ca7ed6bf200100717cb6c45bfa83a9e03cf8d501c6272999843470afecb32ed – before 992e4ff7116a77968039277b5d6aaa535c2f2184bfa83a9e03cf8d501c6272999843470afecb32ed – before f0950402e8c76e7dcb08563f1b4e8000fbc62455
Linux Linux 2.6.15

References