CVE Database›Document archive›CVE-2023-53782

CVE-2023-53782

kernel: dccp: Fix out of bounds access in DCCP error handler

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · December 9, 2025

Updated · June 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

dccp: Fix out of bounds access in DCCP error handler

There was a previous attempt to fix an out-of-bounds access in the DCCP error handlers, but that fix assumed that the error handlers only want to access the first 8 bytes of the DCCP header. Actually, they also look at the DCCP sequence number, which is stored beyond 8 bytes, so an explicit pskb_may_pull() is required.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified