CVE-2023-53661
mediumIn the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression…
Vendor / product: Linux — linux kernel
In the Linux kernel, the following vulnerability has been resolved: bnxt: avoid overflow in bnxt_get_nvram_directory() The value of an arithmetic expression is subject of possible overflow due to a failure to cast operands to a larger data type before performing arithmetic. Used macro for multiplication instead operator for avoiding overflow. Found by Security Code and Linux Verification Center (linuxtesting.org) with SVACE.
CVSS
5.5
5.5 (CVSS v3.1)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Severity source: NVD CVSS v3.1 (nvd@nist.gov)
Timeline (UTC)
Published: 2025-10-07 16:15
Modified: 2026-10-28 20:10
NVD status: Analyzed
Last synced 1 day ago
Verified against the source API 2026-10-28 20:34 UTC
Exploitation
Not listed in CISA KEV (as of last catalog sync)
Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).
Affected products
linux / linux_kernel ≥4.4 <5.15.113, ≥5.16 <6.1.30, ≥6.2 <6.3.4
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
Patch / mitigation: https://git.kernel.org/stable/c/17e0453a7523ad7a25bb47af941b150a6c66d7b6
Patch / mitigation: https://git.kernel.org/stable/c/7c6dddc239abe660598c49ec95ea0ed6399a4b2a
Patch / mitigation: https://git.kernel.org/stable/c/d5eaf2a6b077f32a477feb1e9e1c1f60605b460e
Patch / mitigation: https://git.kernel.org/stable/c/efb1a257513438d43f4335f09b2f684e8167cad2
References
- https://git.kernel.org/stable/c/17e0453a7523ad7a25bb47af941b150a6c66d7b6 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/7c6dddc239abe660598c49ec95ea0ed6399a4b2a 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/d5eaf2a6b077f32a477feb1e9e1c1f60605b460e 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- https://git.kernel.org/stable/c/efb1a257513438d43f4335f09b2f684e8167cad2 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Data sources
NVD CVE API 2.0 — fetched 2026-10-28 20:34 UTC · record ↗