CVE-2023-53661

In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow. Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/17e0453a7523ad7a25bb47af941b150a6c66d7b6	Patch
https://git.kernel.org/stable/c/7c6dddc239abe660598c49ec95ea0ed6399a4b2a	Patch
https://git.kernel.org/stable/c/d5eaf2a6b077f32a477feb1e9e1c1f60605b460e	Patch
https://git.kernel.org/stable/c/efb1a257513438d43f4335f09b2f684e8167cad2	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

28 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: bnxt: evitar desbordamiento en bnxt_get_nvram_directory() El valor de una expresión aritmética está sujeto a un posible desbordamiento debido a un fallo al convertir operandos a un tipo de datos más grande antes de realizar operaciones aritméticas. Se utilizó una macro para la multiplicación en lugar del operador para evitar el desbordamiento. Encontrado por Security Code and Linux Verification Center (linuxtesting.org) con SVACE.

Information

Published : 2025-10-07 16:15

Updated : 2026-10-28 20:10

NVD link : CVE-2023-53661

Mitre link : CVE-2023-53661

CVE.ORG link : CVE-2023-53661

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2023-53661", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c0c050c58d840994ba842ad1c338a98e7c12b764", "lessThan": "d5eaf2a6b077f32a477feb1e9e1c1f60605b460e", "versionType": "git"}, {"status": "affected", "version": "c0c050c58d840994ba842ad1c338a98e7c12b764", "lessThan": "efb1a257513438d43f4335f09b2f684e8167cad2", "versionType": "git"}, {"status": "affected", "version": "c0c050c58d840994ba842ad1c338a98e7c12b764", "lessThan": "17e0453a7523ad7a25bb47af941b150a6c66d7b6", "versionType": "git"}, {"status": "affected", "version": "c0c050c58d840994ba842ad1c338a98e7c12b764", "lessThan": "7c6dddc239abe660598c49ec95ea0ed6399a4b2a", "versionType": "git"}], "programFiles": ["drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.4"}, {"status": "unaffected", "version": "0", "lessThan": "4.4", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.113", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.30", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.3.4", "versionType": "semver", "lessThanOrEqual": "6.3.*"}, {"status": "unaffected", "version": "6.4", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c"], "defaultStatus": "affected"}]}], "published": "2025-10-07T16:15:49.810", "references": [{"url": "https://git.kernel.org/stable/c/17e0453a7523ad7a25bb47af941b150a6c66d7b6", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/7c6dddc239abe660598c49ec95ea0ed6399a4b2a", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d5eaf2a6b077f32a477feb1e9e1c1f60605b460e", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/efb1a257513438d43f4335f09b2f684e8167cad2", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbnxt: avoid overflow in bnxt_get_nvram_directory()\n\nThe value of an arithmetic expression is subject\nof possible overflow due to a failure to cast operands to a larger data\ntype before performing arithmetic. Used macro for multiplication instead\noperator for avoiding overflow.\n\nFound by Security Code and Linux Verification\nCenter (linuxtesting.org) with SVACE."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbnxt: evitar desbordamiento en bnxt_get_nvram_directory()\n\nEl valor de una expresi\u00f3n aritm\u00e9tica est\u00e1 sujeto a un posible desbordamiento debido a un fallo al convertir operandos a un tipo de datos m\u00e1s grande antes de realizar operaciones aritm\u00e9ticas. Se utiliz\u00f3 una macro para la multiplicaci\u00f3n en lugar del operador para evitar el desbordamiento.\n\nEncontrado por Security Code and Linux Verification Center (linuxtesting.org) con SVACE."}], "lastModified": "2026-10-28T20:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AFD9072E-62C5-4362-B1C7-703543C88B7B", "versionEndExcluding": "5.15.113", "versionStartIncluding": "4.4"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107", "versionEndExcluding": "6.1.30", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B", "versionEndExcluding": "6.3.4", "versionStartIncluding": "6.2"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}