CVE-2023-53033
netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits If the offset + length goes over the ethernet + vlan header, then the length is adjusted to copy the bytes that are within the boundaries of the vlan_ethhdr scratchpad area. The remaining bytes beyond ethernet + vlan header are copied directly from the skbuff data area. Fix incorrect arithmetic operator: subtract, not add, the size of the vlan header in case of double-tagged packets to adjust the length accordingly to address CVE-2023-0179.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Mar 27, 2025 |
| Last Updated | May 11, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new unknown vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Linux / Linux
f6ae9f120dada00abfb47313364c35118469455f < 550efeff989b041f3746118c0ddd863c39ddc1aa f6ae9f120dada00abfb47313364c35118469455f < a8acfe2c6fb99f9375a9325807a179cd8c32e6e3 f6ae9f120dada00abfb47313364c35118469455f < 76ef74d4a379faa451003621a84e3498044e7aa3 f6ae9f120dada00abfb47313364c35118469455f < 696e1a48b1a1b01edad542a1ef293665864a4dd0
Linux / Linux
5.5
References
git.kernel.org: https://git.kernel.org/stable/c/550efeff989b041f3746118c0ddd863c39ddc1aa git.kernel.org: https://git.kernel.org/stable/c/a8acfe2c6fb99f9375a9325807a179cd8c32e6e3 git.kernel.org: https://git.kernel.org/stable/c/76ef74d4a379faa451003621a84e3498044e7aa3 git.kernel.org: https://git.kernel.org/stable/c/696e1a48b1a1b01edad542a1ef293665864a4dd0