CVE-2023-53543: vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check

Affected versions

NVD version ranges (for catalog products). Add the product to your stack with a version and matching uses these.

• linux linux kernel5.15.198 and later · before 5.15.209
• linux linux kernel5.16 and later · before 6.1.47
• linux linux kernel6.2 and later · before 6.4.12
• linux linux kernel6.5

Versions reported by the vendor

Affected version ranges reported by the assigning authority (Linux). Independent of NVD's CPE analysis and usually ahead of it.

• Linux Linux

  • 5.16affected
  • 447092100c7e71aa20469a270fcee441d807ed58 and later · before baed19c108ac8287425b93a44985bbe9a0b1af8daffected · git
  • ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a and later · before ff71709445ac033e6e250d971683110e4781c068affected · git
  • ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a and later · before ea65e8b5e6b1a34deda7564f09c90e9e80db436aaffected · git
  • ad69dd0bf26b88ec6ab26f8bbe5cd74fbed7672a and later · before 5d6ba607d6cb5c58a4ddf33381e18c83dbb4098faffected · git
  • 5.15.198 and later · before 5.15.209affected · semver
  • before 5.16not affected · semver
  • 5.15.209 and later · up to and including 5.15.*not affected · semver
  • 6.1.47 and later · up to and including 6.1.*not affected · semver
  • 6.4.12 and later · up to and including 6.4.*not affected · semver

Package-level exposure

OSV and GitHub Advisory data: ecosystem, package and range. SBOM matching uses this table.

Other highest-scoring records for the same primary product.

• CVE-2026-31431crypto: algif_aead - Revert to operating out-of-placeKEV
  90Now
• CVE-2022-0847A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe KEV
  89Now
• CVE-2021-22555Heap Out-Of-Bounds Write in Netfilter IP6T_SO_SET_REPLACEKEV
  85Now

Published before and after this one in the same product

• ← EarlierCVE-2023-53541Oct 4, 2025 · mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
  31Monitor
• ← EarlierCVE-2023-53542Oct 4, 2025 · ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy
  22Monitor
• Later →CVE-2023-53544Oct 4, 2025 · cpufreq: davinci: Fix clk use after free
  31Monitor

FIRST EPSS daily score; only changes of 0.01 or more are recorded (step chart).

Attack context

MITRE CAPEC attack patterns and ATT&CK techniques for this weakness class (CWE). A starting point for detection rules and threat hunting.

MITRE has no CAPEC/ATT&CK mapping for this CWE.