CVE-2023-54257
A critical memory corruption bug was discovered in the Linux kernel’s macb network driver. The flaw could allow an attacker to corrupt kernel memory, potentially crashing the system or executing arbitrary code. The issue has been fixed in newer kernel releases.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users running versions before the fix, particularly those using the macb driver on devices that support extended buffer descriptor mode.
Real-world impact
An attacker could trigger a kernel crash or gain elevated privileges by exploiting the memory corruption, leading to denial of service or potential system compromise.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability can be exploited without authentication or user interaction, and it has a high impact on confidentiality, integrity, and availability. The ease of exploitation and the severe consequences contribute to the critical rating.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the macb driver fix.
- 02Reboot the system to load the new kernel.
NVD-referenced vendor advisory
Timeline
- Dec 30, 2025 · Dec 30, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
How it’s attacked
References & advisories
- git.kernel.org/stable/c/1bec9da233f779e7b6…
- git.kernel.org/stable/c/5dcf3a6843d0d7cc76…
- git.kernel.org/stable/c/7169d1638824c4bf7e…
- git.kernel.org/stable/c/7ccc58a1a75601c936…
- git.kernel.org/stable/c/82e626af24683e0121…
- git.kernel.org/stable/c/9412a9bf5952cdf5d0…
- git.kernel.org/stable/c/dd7a49a3eaf723a01b…
- git.kernel.org/stable/c/e8b74453555872851b…