CVE-2023-53661
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
36/100
Published: 2025-10-07
Modified: 2026-10-28
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Interaction
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
Low
UI:
None
S:
Unchanged
C:
None
I:
None
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow. Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.
Weakness Classification (1)
Affected Software (1)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 4.4 – 5.15.113 |
References & Advisories (4)
Patch
Patch
Patch
Patch