What’s Vulnerable › Vulnerabilities

CVE-2023-53040: ca8210: fix mac_len negative array access

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-02 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: ca8210: fix mac_len negative array access This patch fixes a buffer overflow access of skb->data if ieee802154_hdr_peek_addrs() fails.

Affected products

• Linux kernel: before 4.14.312; from 4.15 before 4.19.280; from 4.20 before 5.4.240; from 5.5 before 5.10.177; from 5.11 before 5.15.105; from 5.16 before 6.1.22 — fixed in 4.14.312, 4.19.280, 5.10.177, 5.15.105, 5.4.240, 6.1.22

How to fix

Upgrade to a fixed version: Linux kernel 4.14.312, 4.19.280, 5.10.177, 5.15.105. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/55d836f75778d2e2cafe37e023f9c106400bad4b
• https://git.kernel.org/stable/c/5da4469a7aa011de614c3e2ae383c35a353a382e
• https://git.kernel.org/stable/c/6c993779ea1d0cccdb3a5d7d45446dd229e610a3
• https://git.kernel.org/stable/c/7df72bedbdd1d02bb216e1f6eca0a16900238c4e
• https://git.kernel.org/stable/c/918944526a386f186dd818ea6b0bcbed75d8c16b
• https://git.kernel.org/stable/c/d143e327c97241599c958d1ba9fbaa88c37db721
• https://git.kernel.org/stable/c/d2b3bd0d4cadfdb7f3454d2aef9d5d9e8b48aae4
• https://git.kernel.org/stable/c/fd176a18db96d574d8c4763708abcec4444a08b6

Get alerted when CVE-2023-53040 or the next vulnerability affects your stack