https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:52:55 +0000 https://vulnerability.circl.lu/vuln/cve-2023-53516 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF</p> <p>The previous commit 954d1fa1ac93 (&#34;macvlan: Add netlink attribute for broadcast cutoff&#34;) added one additional attribute named IFLA_MACVLAN_BC_CUTOFF to allow broadcast cutfoff.</p> <p>However, it forgot to describe the nla_policy at macvlan_policy (drivers/net/macvlan.c). Hence, this suppose NLA_S32 (4 bytes) integer can be faked as empty (0 bytes) by a malicious user, which could leads to OOB in heap just like CVE-2023-3773.</p> <p>To fix it, this commit just completes the nla_policy description for IFLA_MACVLAN_BC_CUTOFF. This enforces the length check and avoids the potential OOB read.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>macvlan: add forgotten nla_policy for IFLA_MACVLAN_BC_CUTOFF</p> <p>The previous commit 954d1fa1ac93 (&#34;macvlan: Add netlink attribute for broadcast cutoff&#34;) added one additional attribute named IFLA_MACVLAN_BC_CUTOFF to allow broadcast cutfoff.</p> <p>However, it forgot to describe the nla_policy at macvlan_policy (drivers/net/macvlan.c). Hence, this suppose NLA_S32 (4 bytes) integer can be faked as empty (0 bytes) by a malicious user, which could leads to OOB in heap just like CVE-2023-3773.</p> <p>To fix it, this commit just completes the nla_policy description for IFLA_MACVLAN_BC_CUTOFF. This enforces the length check and avoids the potential OOB read.</p> https://vulnerability.circl.lu/vuln/cve-2023-53516