{
  "cveId": "CVE-2023-53798",
  "url": "https://patchblox.com/security/cve/CVE-2023-53798",
  "summary": "CVE-2023-53798 is fixed in 37 products on 1 platform, first by ALAS2023-2023-184, released May 25, 2023. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ethtool: Fix uninitialized number of lanes  It i...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ethtool: Fix uninitialized number of lanes  It is not possible to set the number of lanes when setting link modes using the legacy IOCTL ethtool interface. Since \u0027struct ethtool_link_ksettings\u0027 is not initialized in this path, drivers receive an uninitialized number of lanes in \u0027struct ethtool_link_ksettings::lanes\u0027.  When this information is later queried from drivers, it results in the ethtool code making decisions based on uninitialized memory, leading to the following KMSAN splat [1]. In practice, this most likely only happens with the tun driver that simply returns whatever it got in the set operation.  As far as I can tell, this uninitialized memory is not leaked to user space thanks to the \u0027ethtool_ops-\u003Ecap_link_lanes_supported\u0027 check in linkmodes_prepare_data().  Fix by initializing the structure in the IOCTL path. Did not find any more call sites that pass an uninitialized structure when calling \u0027ethtool_ops::set_link_ksettings()\u0027.  [1] BUG: KMSAN: uninit-value in ethnl_update_linkmodes net/ethtool/linkmodes.c:273 [inline] BUG: KMSAN: uninit-value in ethnl_set_linkmodes\u002B0x190b/0x19d0 net/ethtool/linkmodes.c:333  ethnl_update_linkmodes net/ethtool/linkmodes.c:273 [inline]  ethnl_set_linkmodes\u002B0x190b/0x19d0 net/ethtool/linkmodes.c:333  ethnl_default_set_doit\u002B0x88d/0xde0 net/ethtool/netlink.c:640  genl_family_rcv_msg_doit net/netlink/genetlink.c:968 [inline]  genl_family_rcv_msg net/netlink/genetlink.c:1048 [inline]  genl_rcv_msg\u002B0x141a/0x14c0 net/netlink/genetlink.c:1065  netlink_rcv_skb\u002B0x3f8/0x750 net/netlink/af_netlink.c:2577  genl_rcv\u002B0x40/0x60 net/netlink/genetlink.c:1076  netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]  netlink_unicast\u002B0xf41/0x1270 net/netlink/af_netlink.c:1365  netlink_sendmsg\u002B0x127d/0x1430 net/netlink/af_netlink.c:1942  sock_sendmsg_nosec net/socket.c:724 [inline]  sock_sendmsg net/socket.c:747 [inline]  ____sys_sendmsg\u002B0xa24/0xe40 net/socket.c:2501  ___sys_sendmsg\u002B0x2a1/0x3f0 net/socket.c:2555  __sys_sendmsg net/socket.c:2584 [inline]  __do_sys_sendmsg net/socket.c:2593 [inline]  __se_sys_sendmsg net/socket.c:2591 [inline]  __x64_sys_sendmsg\u002B0x36b/0x540 net/socket.c:2591  do_syscall_x64 arch/x86/entry/common.c:50 [inline]  do_syscall_64\u002B0x41/0xc0 arch/x86/entry/common.c:80  entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  Uninit was stored to memory at:  tun_get_link_ksettings\u002B0x37/0x60 drivers/net/tun.c:3544  __ethtool_get_link_ksettings\u002B0x17b/0x260 net/ethtool/ioctl.c:441  ethnl_set_linkmodes\u002B0xee/0x19d0 net/ethtool/linkmodes.c:327  ethnl_default_set_doit\u002B0x88d/0xde0 net/ethtool/netlink.c:640  genl_family_rcv_msg_doit net/netlink/genetlink.c:968 [inline]  genl_family_rcv_msg net/netlink/genetlink.c:1048 [inline]  genl_rcv_msg\u002B0x141a/0x14c0 net/netlink/genetlink.c:1065  netlink_rcv_skb\u002B0x3f8/0x750 net/netlink/af_netlink.c:2577  genl_rcv\u002B0x40/0x60 net/netlink/genetlink.c:1076  netlink_unicast_kernel net/netlink/af_netlink.c:1339 [inline]  netlink_unicast\u002B0xf41/0x1270 net/netlink/af_netlink.c:1365  netlink_sendmsg\u002B0x127d/0x1430 net/netlink/af_netlink.c:1942  sock_sendmsg_nosec net/socket.c:724 [inline]  sock_sendmsg net/socket.c:747 [inline]  ____sys_sendmsg\u002B0xa24/0xe40 net/socket.c:2501  ___sys_sendmsg\u002B0x2a1/0x3f0 net/socket.c:2555  __sys_sendmsg net/socket.c:2584 [inline]  __do_sys_sendmsg net/socket.c:2593 [inline]  __se_sys_sendmsg net/socket.c:2591 [inline]  __x64_sys_sendmsg\u002B0x36b/0x540 net/socket.c:2591  do_syscall_x64 arch/x86/entry/common.c:50 [inline]  do_syscall_64\u002B0x41/0xc0 arch/x86/entry/common.c:80  entry_SYSCALL_64_after_hwframe\u002B0x63/0xcd  Uninit was stored to memory at:  tun_set_link_ksettings\u002B0x37/0x60 drivers/net/tun.c:3553  ethtool_set_link_ksettings\u002B0x600/0x690 net/ethtool/ioctl.c:609  __dev_ethtool net/ethtool/ioctl.c:3024 [inline]  dev_ethtool\u002B0x1db9/0x2a70 net/ethtool/ioctl.c:3078  dev_ioctl\u002B0xb07/0x1270 net/core/dev_ioctl.c:524  sock_do_ioctl\u002B0x295/0x540 net/socket.c:1213  sock_i ---truncated---",
  "published": "2023-05-25T17:41:00Z",
  "severity": "important",
  "cvss": 8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H",
  "epss": 0.00216,
  "epssPercentile": 0.12084,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel",
      "release": "rocky 8",
      "fixedVersion": "0:4.18.0-553.123.1.el8_10.cloud.0.1",
      "fix": "RXSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rxsa-2024-3138",
      "released": "2026-05-29T18:07:16Z"
    },
    {
      "platform": "linux",
      "product": "kernel-abi-stablelists",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-doc",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-headers",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-libbpf-static",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.1.29-47.49",
      "release": "amzn 2023",
      "fixedVersion": "1.0-0.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-tools-libs-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-core",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-devel",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump-modules-extra",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.37-1",
      "fix": "DEBIAN-CVE-2023-53798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53798",
      "released": "2025-12-09T01:16:51Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-53798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53798",
      "released": "2025-12-09T01:16:51Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.3.7-1",
      "fix": "DEBIAN-CVE-2023-53798",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53798",
      "released": "2025-12-09T01:16:51Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "RHEL 8",
      "fixedVersion": "0:4.18.0-553.el8_10",
      "fix": "RHSA-2024:3138",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2024-3138",
      "released": "2024-05-22T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "6.1.29-47.49.amzn2023",
      "fix": "ALAS2023-2023-184",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2023-184",
      "released": "2023-05-25T17:41:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}