Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2023-53543

7.8 · HIGH

In the Linux kernel, the following vulnerability has been resolved: vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check The vdpa_nl_policy structure is used to validate the nlattr wh…

Published Oct 4, 2025CWE-787EPSS 0.16%

Overview

CVE-2023-53543 is a high-severity vulnerability. It was published on October 4, 2025 and has a CVSS 3.1 base score of 7.8 (HIGH).

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

The vdpa_nl_policy structure is used to validate the nlattr when parsing

the incoming nlmsg. It will ensure the attribute being described produces

a valid nlattr pointer in info->attrs before entering into each handler

in vdpa_nl_ops.

That is to say, the missing part in vdpa_nl_policy may lead to illegal

nlattr after parsing, which could lead to OOB read just like CVE-2023-3773.

This patch adds the missing nla_policy for vdpa max vqp attr to avoid

such bugs.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/5d6ba607d6cb5c58a4ddf33381e18c83dbb4098fRefgit.kernel.org/stable/c/baed19c108ac8287425b93a44985bbe9a0b1af8dRefgit.kernel.org/stable/c/ea65e8b5e6b1a34deda7564f09c90e9e80db436aRefgit.kernel.org/stable/c/ff71709445ac033e6e250d971683110e4781c068

How CyberStrike helps

Frequently asked questions

What is CVE-2023-53543?

CVE-2023-53543 is a high-severity vulnerability. It was published on October 4, 2025 and has a CVSS 3.1 base score of 7.8 (HIGH).

How severe is CVE-2023-53543?

This vulnerability has a CVSS 3.1 base score of 7.8, rated HIGH. It requires local or adjacent network access to exploit. Some level of privileges is required for exploitation.

How do I fix or remediate CVE-2023-53543?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-53543?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2023-53543 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Related HIGH CVEs from 2023

View all
Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999