7.8

CVE-2023-53179: linux Out-of-bounds Write

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2023-53179DEBIAN-CVE-2023-53179
Published 15-09-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2023-53179 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 6.1% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 16 · Related 16
SUSE-SU-2025:03600-1SUSE-SU-2025:03613-1SUSE-SU-2025:03615-1SUSE-SU-2025:03626-1SUSE-SU-2025:03628-1SUSE-SU-2025:03634-1

Timeline

  1. 15-09-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c The missing IP_SET_HASH_WITH_NET0 macro in ip_set_hash_netportnet can lead to the use of wrong `CIDR_POS(c)` for calculating array offsets, which can lead to integer underflow. As a result, it leads to slab out-of-bound access. This patch adds back the IP_SET_HASH_WITH_NET0 macro to ip_set_hash_netportnet to address the issue.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

0.00 pp

From 0.17% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu123 products
  • linux< 4.4.0-246.280 | < 4.15.0-219.230 | < 5.4.0-165.182 | < 5.15.0-87.97
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 4.4.0-1124.130 | < 4.4.0-1162.177 | < 4.15.0-1162.175 | < 5.4.0-1112.121 | < 5.15.0-1048.53
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0d5d0b5c41f766355f2b42c47d13ea001f754c7d, < 7935b636dd693dfe4483cfef4a1e91366c8103fa | ≥ cb3e590df429ce151d5041884a4947099b8ad6a7, < e632d09dffc68b9602d6893a99bfe3001d36cefc | ≥ 886503f34d63e681662057448819edb5b1057a97, < 109e830585e89a03d554bf8ad0e668630d0a6260 | ≥ 886503f34d63e681662057448819edb5b1057a97, < 83091f8ac03f118086596f17c9a52d31d6ca94b3 | ≥ 886503f34d63e681662057448819edb5b1057a97, < a9e6142e5f8f6ac7d1bca45c1b2b13b084ea9e14 | ≥ 886503f34d63e681662057448819edb5b1057a97, < 7ca0706c68adadf86a36b60dca090f5e9481e808 | ≥ 886503f34d63e681662057448819edb5b1057a97, < d59b6fc405549f7caf31f6aa5da1d6bef746b166 | ≥ 886503f34d63e681662057448819edb5b1057a97, < d95c8420efe684b964e3aa28108e9a354bcd7225 | ≥ 886503f34d63e681662057448819edb5b1057a97, < 050d91c03b28ca479df13dfb02bcd2c60dd6a878 | 186642845b02e1a7944ef33c3a3ac41eba77517f | 919560afc21f91ca352a20394d5249aba1799690 | ≥ 4.14.84, < 4.14.326 | ≥ 4.19.5, < 4.19.295 | ≥ 4.4.165, < 4.5 | ≥ 4.9.141, < 4.10 | 4.20
  • linux_kernel≥ 4.4.165, < 4.5 | ≥ 4.9.141, < 4.10 | ≥ 4.14.84, < 4.14.326 | ≥ 4.19.5, < 4.19.295 | ≥ 4.20.1, < 5.4.257 | ≥ 5.5, < 5.10.195 | ≥ 5.11, < 5.15.132 | ≥ 5.16, < 6.1.53 | ≥ 6.2, < 6.4.16 | ≥ 6.5, < 6.5.3 | 4.20 | 4.20:rc2 | 4.20:rc3 | 4.20:rc4 | 4.20:rc5 | 4.20:rc6 | 4.20:rc7
Debian1 product
  • linux< 6.1.55-1 | < 6.5.3-1

3 vendors · 126 products

References

13 links
Show all 13 references