CVE-2023-53863

A kernel information leak vulnerability was found in the netlink FDB (Forwarding Database) dump functionality in the Linux kernel. The code incorrectly hard-codes ETH_ALEN (6 bytes) for device addresses, but some network devices have shorter addresses (e.g., 4 bytes). When dumping FDB entries for such devices, uninitialized kernel memory is copied to userspace, potentially leaking sensitive information.

This is an information leak vulnerability in netlink FDB dumps affecting devices with non-standard address lengths. The impact is limited as it requires local access and affects only specific network device configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.