CVE-2023-53782

Linux Kernel 4.9.0-6.5.2 - Out-of-Bounds Access in DCCP Error Handler

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: dccp: Fix out of bounds access in DCCP error handler There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of the DCCP header. Actually, they also look at the DCCP sequence number, which is stored beyond 8 bytes, so an explicit pskb_may_pull() is required.

Scores

EPSS 0.0021
EPSS Percentile 11.6%

Details

Status published
Products (46)
linux/Kernel 4.15.0 - 4.19.295linux
linux/Kernel 4.20.0 - 5.4.257linux
linux/Kernel 4.9.0 - 4.14.326linux
linux/Kernel 5.11.0 - 5.15.132linux
linux/Kernel 5.16.0 - 6.1.53linux
linux/Kernel 5.5.0 - 5.10.195linux
linux/Kernel 6.2.0 - 6.4.16linux
linux/Kernel 6.5.0 - 6.5.3linux
Linux/Linux < 4.9
Linux/Linux 261def571d19d3b4e2228643c5c0ac89f5e10d15
... and 36 more
Published Dec 09, 2025
Tracked Since Feb 18, 2026