Vulnetix
Try Vulnetix Request Demo
CVE-2023-53661 PUBLISHED CVSS 5.5 MEDIUM

In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow. Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.

EPSS 0.02% · 3.2th percentile

Risk Scores

CVSS v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score
0.02%
3.2th percentile

Affected Products

VendorProductVersions
linuxlinux_kernel4.4, 4.4, 4.4
LinuxLinux6.1.30, c0c050c58d840994ba842ad1c338a98e7c12b764, 6.4

Timeline

References

Open in Interactive Console →