CVE-2023-53058

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53058
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, Fix an Oops in error handling code The error handling dereferences "vport". There is nothing we can do if it is an error pointer except returning the error code.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1a9853a7437a22fd849347008fb3c85087906b56 Patch
https://git.kernel.org/stable/c/388188fb58bef9e7f3ca4f8970f03d493b66909f Patch
https://git.kernel.org/stable/c/5eadc80328298ef7beaaf0cd96791667d3b485ca Patch
https://git.kernel.org/stable/c/640fcdbcf27fc62de9223f958ceb4e897a00e791 Patch
https://git.kernel.org/stable/c/c4c977935b2fc60084b3735737d17a06e7ba1bd0 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
History

07 Nov 2025, 16:29

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/1a9853a7437a22fd849347008fb3c85087906b56 - () https://git.kernel.org/stable/c/1a9853a7437a22fd849347008fb3c85087906b56 - Patch
References () https://git.kernel.org/stable/c/388188fb58bef9e7f3ca4f8970f03d493b66909f - () https://git.kernel.org/stable/c/388188fb58bef9e7f3ca4f8970f03d493b66909f - Patch
References () https://git.kernel.org/stable/c/5eadc80328298ef7beaaf0cd96791667d3b485ca - () https://git.kernel.org/stable/c/5eadc80328298ef7beaaf0cd96791667d3b485ca - Patch
References () https://git.kernel.org/stable/c/640fcdbcf27fc62de9223f958ceb4e897a00e791 - () https://git.kernel.org/stable/c/640fcdbcf27fc62de9223f958ceb4e897a00e791 - Patch
References () https://git.kernel.org/stable/c/c4c977935b2fc60084b3735737d17a06e7ba1bd0 - () https://git.kernel.org/stable/c/c4c977935b2fc60084b3735737d17a06e7ba1bd0 - Patch
First Time Linux
Linux linux Kernel
CWE CWE-476
CPE cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

05 May 2025, 20:54

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: net/mlx5: E-Switch. Se corrige un error en el código de gestión de errores. El código de gestión de errores desreferencia "vport". Si se trata de un puntero de error, no podemos hacer nada más que devolver el código de error.

02 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-02 16:15

Updated : 2025-11-07 16:29

NVD link : CVE-2023-53058

Mitre link : CVE-2023-53058

CVE.ORG link : CVE-2023-53058

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference