Linux Kernel Vulnerability in macvlan Affected by Broadcast Cutoff

CVE-2023-53516

What is CVE-2023-53516?

A vulnerability in the Linux kernel's macvlan module involves the absence of a description for the nla_policy associated with the IFLA_MACVLAN_BC_CUTOFF attribute. This oversight allows a malicious user to manipulate the associated NLA_S32 (4 bytes) integer as empty (0 bytes), potentially leading to an out-of-bounds (OOB) read in the heap similar to previous vulnerabilities. The recent fix ensures complete nla_policy enforcement for IFLA_MACVLAN_BC_CUTOFF, preventing such exploitation by implementing necessary length checks.

References