Not yet scoredPublished Dec 30, 2025

CVE-2023-54312samples/bpf: Fix buffer overflow in tcp_basertt

Updated under an hour ago (Oct 28, 2026, 12:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: samples/bpf: Fix buffer overflow in tcp_basertt Using sizeof(nv) or strlen(nv)+1 is correct.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from c890063e440456e75c2e70f6bcec3797f1771eb6 before cf7514fedc25675e68b74941df28a883951e70fd; from c890063e440456e75c2e70f6bcec3797f1771eb6 before f394d204d64095d72ad9f03ff98f3f3743bf743a; from c890063e440456e75c2e70f6bcec3797f1771eb6 before bd3e880dce27d225598730d2bbb3dc05b443af22; from c890063e440456e75c2e70f6bcec3797f1771eb6 before e92f61e0701ea780e57e1be8dbd1fbec5f42c09e; from c890063e440456e75c2e70f6bcec3797f1771eb6 before 56c25f2763a16db4fa1b486e6a21dc246cd992bd; from c890063e440456e75c2e70f6bcec3797f1771eb6 before dfc004688518d24159606289c74d0c4e123e6436; from c890063e440456e75c2e70f6bcec3797f1771eb6 before 7c08d1b0d1f75117cf82aeaef49ba9f861b3fb59; from c890063e440456e75c2e70f6bcec3797f1771eb6 before f4dea9689c5fea3d07170c2cb0703e216f1a0922	CNA record

References

References

https://git.kernel.org/stable/c/cf7514fedc25675e68b74941df28a883951e70fd
https://git.kernel.org/stable/c/f394d204d64095d72ad9f03ff98f3f3743bf743a
https://git.kernel.org/stable/c/bd3e880dce27d225598730d2bbb3dc05b443af22
https://git.kernel.org/stable/c/e92f61e0701ea780e57e1be8dbd1fbec5f42c09e
https://git.kernel.org/stable/c/56c25f2763a16db4fa1b486e6a21dc246cd992bd
https://git.kernel.org/stable/c/dfc004688518d24159606289c74d0c4e123e6436
https://git.kernel.org/stable/c/7c08d1b0d1f75117cf82aeaef49ba9f861b3fb59
https://git.kernel.org/stable/c/f4dea9689c5fea3d07170c2cb0703e216f1a0922

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.