Advisory Published
Updated

CVE-2023-53033: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits

First published: Thu Mar 27 2025(Updated: )

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlan_ethhdr scratchpad area. The remaining bytes beyond ethernet + vlan header are copied directly from the skbuff data area. Fix incorrect arithmetic operator: subtract, not add, the size of the vlan header in case of double-tagged packets to adjust the length accordingly to address CVE-2023-0179.

Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Affected SoftwareAffected VersionHow to fix
Linux Kernel

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2023-53033?

    CVE-2023-53033 has been classified as a medium severity vulnerability.

  • How do I fix CVE-2023-53033?

    To fix CVE-2023-53033, update your Linux kernel to a patched version that addresses this vulnerability.

  • What type of vulnerability is CVE-2023-53033?

    CVE-2023-53033 is a networking vulnerability in the netfilter module of the Linux kernel.

  • Which systems are affected by CVE-2023-53033?

    CVE-2023-53033 affects systems running vulnerable versions of the Linux kernel utilizing netfilter.

  • What are the potential impacts of CVE-2023-53033?

    Exploitation of CVE-2023-53033 could lead to unexpected behavior in network packet processing.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203