What’s Vulnerable › Vulnerabilities

CVE-2023-53657: ice: Don't tx before switchdev is fully configured

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-07 · updated 2026-06-17
• Weakness: CWE-476

Description

In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while some resources are still not allocated which might cause NULL pointer dereference. Fix this by checking if switchdev configuration was finished.

Affected products

• Linux kernel: from 5.16 before 6.1.55; from 6.2 before 6.5.5 — fixed in 6.1.55, 6.5.5

How to fix

Upgrade to a fixed version: Linux kernel 6.1.55, 6.5.5. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5760a72b3060150b587eff3e879648c7470efddd
• https://git.kernel.org/stable/c/63ff5a94649837d980e3b9ef535c793ec8cb0ca7
• https://git.kernel.org/stable/c/7aa529a69e92b9aff585e569d5003f7c15d8d60b

Get alerted when CVE-2023-53657 or the next vulnerability affects your stack