CVE-2023-53782

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: dccp: Fix out of bounds access in DCCP error handler There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of the DCCP header. Actually, they also look at the DCCP sequence number, which is stored beyond 8 bytes, so an explicit pskb_may_pull() is required.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedDec 9, 2025
First seenDec 9, 2025

How to fix

Update
  • Linux Linux3533e10272555c422a7d51ebc0ce8c483429f7f2, 177212bf6dc1ff2d13d0409cddc5c9e81feec63d, 7a7dd70cb954d3efa706a429687ded88c02496fa, 4b8a938e329ae4eb54b73b0c87b5170607b038a8, 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9, f8a7f10a1dccf9868ff09342a73dce27501b86df, d8171411a661253e6271fa10b65b46daf1b6471c, ec620c34f5fa5d055f9f6136a387755db6157712, 977ad86c2a1bcaf58f01ab98df5cc145083c489c, 3.3, 3.11, 3.13, 3.17, 4.5, 4.9 or later

Affected products

ProductAffected versionsFixed in
Linux Linux6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 3533e10272555c422a7d51ebc0ce8c483429f7f2, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 177212bf6dc1ff2d13d0409cddc5c9e81feec63d, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 7a7dd70cb954d3efa706a429687ded88c02496fa, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 4b8a938e329ae4eb54b73b0c87b5170607b038a8, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < f8a7f10a1dccf9868ff09342a73dce27501b86df, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < d8171411a661253e6271fa10b65b46daf1b6471c, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < ec620c34f5fa5d055f9f6136a387755db6157712, 6706a97fec963d6cb3f7fc2978ec1427b4651214 ≤ v < 977ad86c2a1bcaf58f01ab98df5cc145083c489c, 96106a207ae972d8f9e4815e84c159f29e4bbee7, 261def571d19d3b4e2228643c5c0ac89f5e10d15, dbf1719c65fb0368a94d15767c669e47e295a073, 46b1ffd4738a3ee04b2e8f5a4b8cfc39e9c722a2, a2df29ed840f90e459a3f8ff029b216be3912731, ba93cf7d2118774c0b2dcfccc8ae999427815caa, 4ca7e66fcce02459fa6961979f9fe30ae1098cf0, bd380617d5d161ea2bbe7a8073b3ca7bca0381e5, bfe7d1dee859cad6802f8e21a0a863f408114612, 968953df833c61fce5adcc0612efeaced24e5719, 99131760a8851e6e5b2c9b24d0a68a3068923a08, 84d9c612bb7a9e44c6bf286bedfbe72a6d2d71d4, 3.2.87 ≤ v < 3.3, 3.10.105 ≤ v < 3.11, 3.12.68 ≤ v < 3.13, 3.16.42 ≤ v < 3.17, 4.4.34 ≤ v < 4.5, 4.8.10 ≤ v < 4.9, 4.93533e10272555c422a7d51ebc0ce8c483429f7f2, 177212bf6dc1ff2d13d0409cddc5c9e81feec63d, 7a7dd70cb954d3efa706a429687ded88c02496fa, 4b8a938e329ae4eb54b73b0c87b5170607b038a8, 6ecf09699eb1554299aa1e7fd13e9e80f656c2f9, f8a7f10a1dccf9868ff09342a73dce27501b86df, d8171411a661253e6271fa10b65b46daf1b6471c, ec620c34f5fa5d055f9f6136a387755db6157712, 977ad86c2a1bcaf58f01ab98df5cc145083c489c, 3.3, 3.11, 3.13, 3.17, 4.5, 4.9

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2023-53782 · Linux · Dark Radar