CVE-2023-53369
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/09/2025
Last modified:
19/09/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
net: dcb: choose correct policy to parse DCB_ATTR_BCN<br />
<br />
The dcbnl_bcn_setcfg uses erroneous policy to parse tb[DCB_ATTR_BCN],<br />
which is introduced in commit 859ee3c43812 ("DCB: Add support for DCB<br />
BCN"). Please see the comment in below code<br />
<br />
static int dcbnl_bcn_setcfg(...)<br />
{<br />
...<br />
ret = nla_parse_nested_deprecated(..., dcbnl_pfc_up_nest, .. )<br />
// !!! dcbnl_pfc_up_nest for attributes<br />
// DCB_PFC_UP_ATTR_0 to DCB_PFC_UP_ATTR_ALL in enum dcbnl_pfc_up_attrs<br />
...<br />
for (i = DCB_BCN_ATTR_RP_0; i
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/199fde04bd875d28b3a5ca525eaaa004eec6e947
- https://git.kernel.org/stable/c/31d49ba033095f6e8158c60f69714a500922e0c3
- https://git.kernel.org/stable/c/5b3dbedb8d4a0f9f7ce904d76b885438af2a21f9
- https://git.kernel.org/stable/c/8e309f43d0ca4051d20736c06a6f84bbddd881da
- https://git.kernel.org/stable/c/a0da2684db18dead3bcee12fb185e596e3d63c2b
- https://git.kernel.org/stable/c/ecff20e193207b44fdbfe64d7de89890f0a7fe6c