Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2023-53705
CVE-2023-53705:
Linux Kernel vulnerability analysis and mitigation
Overview
CVE-2023-53705 is a vulnerability discovered in the Linux kernel's IPv6 implementation, specifically in the ipv6findtlv() function. The vulnerability was identified by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) using the SVACE tool. The issue was disclosed on October 22, 2025 (NVD).
Technical details
The vulnerability stems from an out-of-bounds access issue in the ipv6findtlv() function where optlen is fetched without proper validation to ensure there is more than one byte to parse. This oversight can lead to out-of-bounds access in the IPv6 processing code (NVD, Snyk).
Impact
The vulnerability has been assessed with a medium severity rating based on CentOS security rating. According to EPSS (Exploit Prediction Scoring System), the probability of exploitation is 0.03% (9th percentile), suggesting a relatively low likelihood of exploitation in the wild (Snyk).
Mitigation and workarounds
The vulnerability has been resolved in the Linux kernel through a patch. However, for CentOS 7 kernel-headers package, there is no fixed version available as of the disclosure date (Snyk).
Additional resources
Source: This report was generated using AI
Related Linux Kernel vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management