CVE-2023-53192
A flaw in the Linux kernel’s VXLAN implementation can cause the system to crash. The bug occurs when a 32‑bit packet hash is misinterpreted as a negative 31‑bit value, leading to an out‑of‑bounds array access and a kernel panic. The issue has been fixed in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel 6.5 and earlier, on any system that uses the VXLAN networking feature.
Real-world impact
An attacker could trigger a kernel crash, taking the affected machine offline and disrupting network services. The crash can be caused by crafted VXLAN packets or by normal traffic that triggers the faulty hash handling.
Why this severity
The CVSS score of 9.8 reflects the vulnerability’s ability to cause a complete denial of service with no authentication or user interaction required. The impact is high because it affects confidentiality, integrity, and availability of the entire system.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the vxlan nexthop hash fix, such as the latest 6.5 release or later.
NVD-referenced vendor advisory
Timeline
- Sep 15, 2025 · Sep 15, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.