CVE-2023-53543

CVE-2023-53543 is a high-severity out-of-bounds read vulnerability affecting the Linux kernel's vdpa subsystem. The flaw stems from an incomplete validation policy for netlink attributes, which could lead to an attacker crafting malicious netlink messages that cause an out-of-bounds read. This local vulnerability (CVSS 7.8) allows an attacker with low privileges to achieve high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.