CVE-2023-52906

A flaw was found in the Linux Kernel. The 'TCA_MPLS_LABEL' attribute is of the 'NLA_U32' type, but has a validation type of 'NLA_VALIDATE_FUNCTION'. This is an invalid combination according to 'struct nla_policy', which can trigger the nla_get_range_unsigned() warning when validation of the attribute fails. Despite being 'NLA_U32' type, the associated 'min'/'max' fields in the policy are negative as they are aliased by the 'validate' field. To mitigate, change the attribute type to 'NLA_BINARY', and move the length validation to the validation function.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.