CVE-2023-53657

ice: Don't tx before switchdev is fully configured

5.5 MediumFix available

In the Linux kernel, the following vulnerability has been resolved:

ice: Don't tx before switchdev is fully configured

There is possibility that ice_eswitch_port_start_xmit might be called while some resources are still not allocated which might cause NULL pointer dereference. Fix this by checking if switchdev configuration was finished.

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

0.16%Up 0.1 points since Oct 8, 2025

What each source reports

NVD Score used5.5

In the Linux kernel, the following vulnerability has been resolved:

ice: Don't tx before switchdev is fully configured

Record: CVE-2023-53657
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

CVE ListNo score

ice: Don't tx before switchdev is fully configured

In the Linux kernel, the following vulnerability has been resolved:

ice: Don't tx before switchdev is fully configured

Record: CVE-2023-53657
Updated: 2026-11-02

EUVDEUVD-2025-31977No score

In the Linux kernel, the following vulnerability has been resolved:

ice: Don't tx before switchdev is fully configured

Record: EUVD-2025-31977
Updated: 2026-11-02

GitHub AdvisoriesGHSA-3cqg-r9w7-gjfg5.5

In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before...

In the Linux kernel, the following vulnerability has been resolved:

ice: Don't tx before switchdev is fully configured

Record: GHSA-3cqg-r9w7-gjfg
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-476
Updated: 2026-11-02

OSVBELL-CVE-2023-536575.5

Record: BELL-CVE-2023-53657
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVDEBIAN-CVE-2023-536575.5

In the Linux kernel, the following vulnerability has been resolved: ice: Don't tx before switchdev is fully configured There is possibility that ice_eswitch_port_start_xmit might be called while some resources are still not allocated which might cause NULL pointer dereference. Fix this by checking if switchdev configuration was finished.

Record: DEBIAN-CVE-2023-53657
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

Show 20 moreShow less

OSVRHSA-2023:75578.8

Red Hat Security Advisory: kernel security and bug fix update

Record: RHSA-2023:7557
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:77497.8

Red Hat Security Advisory: kernel security update

Record: RHSA-2023:7749
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:23947.8

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2024:2394
CVSS 3.1: 7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2024:31388.0

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Record: RHSA-2024:3138
CVSS 3.1: 8.0 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVROOT-OS-DEBIAN-11-CVE-2023-536575.5

CVE-2023-53657 in linux - Patched by Root

Root has patched CVE-2023-53657 in the linux package for Root:Debian:11. Multiple fixed versions available.

Record: ROOT-OS-DEBIAN-11-CVE-2023-53657
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-02

OSVROOT-OS-UBUNTU-2204-CVE-2023-536575.5

CVE-2023-53657 in linux - Patched by Root

Root has patched CVE-2023-53657 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.

Record: ROOT-OS-UBUNTU-2204-CVE-2023-53657
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-06

OSVRXSA-2024:31388.0

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux SIG Cloud 8.10 Release Notes linked from the References section.

Record: RXSA-2024:3138
CVSS 3.1: 8.0 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2023-536575.5

Record: UBUNTU-CVE-2023-53657
CVSS 3.1: 5.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Updated: 2026-11-11

OSVCLSA-2025-1762171389No score

kernel: Fix of 16 CVEs

nfs: fix possible null-ptr-deref when parsing param {CVE-2022-50455}
KVM: arm64: Disassociate vcpus from redistributor region on teardown {CVE-2024-40989}
HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556}
ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
tcp_bpf: Fix the sk_mem_uncharge logic in tcp_bpf_sendmsg {CVE-2024-56633}
ovl: Filter invalid inodes with missing lookup function {CVE-2024-56570}
ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() {CVE-2023-53483}
crypto: seqiv - Handle EBUSY correctly {CVE-2023-53373}
KVM: nSVM: Check instead of asserting on nested TSC scaling support {CVE-2023-53663}
ice: Don't tx before switchdev is fully configured {CVE-2023-53657}
rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed {CVE-2023-53655}
mm/swap: fix swap_info_struct race between swapoff and get_swap_pages() {CVE-2023-53623}
ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50485}
ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode {CVE-2022-50485}
ext4: add helper to check quota inums {CVE-2022-50485}
ext4: fix bug_on in __es_tree_search caused by bad quota inode {CVE-2022-50485}
swiotlb: Fix double-allocation of slots due to broken alignment handling {CVE-2024-35814}
swiotlb: fix a braino in the alignment check fix {CVE-2024-35814}
swiotlb: fix slot alignment checks {CVE-2024-35814}
swiotlb: fix the deadlock in swiotlb_do_find_slots
drm/radeon: free iio for atombios when driver shutdown {CVE-2023-53453}

Record: CLSA-2025-1762171389
Updated: 2026-11-02

OSVNo score

ice: Don't tx before switchdev is fully configured

In the Linux kernel, the following vulnerability has been resolved:

ice: Don't tx before switchdev is fully configured

Record: CVE-2023-53657
Updated: 2026-11-02

OSVSUSE-SU-2025:21040-1No score