Security readout for executives and security teams
Plain-English summary
This is a Linux kernel networking issue in the Marvell Prestera switch driver. A local privileged user can trigger kernel warnings and potential availability impact by adding an IPv4 route that references a nexthop ID. It matters mainly for systems using Prestera-based switching hardware, not ordinary Linux servers without that driver path.
Executive priority
Treat as a targeted infrastructure availability issue. It should be remediated during normal kernel maintenance unless Prestera-based switching systems are mission-critical or showing related warnings, in which case prioritize earlier patching.
Technical view
The Prestera driver handled IPv4 routes using nexthop IDs with fib_info_nh() instead of fib_info_nhc(). The CVE record shows warnings in __prestera_fi_is_direct when processing such routes. CVSS is 5.5 with local attack vector, low complexity, low privileges, no confidentiality or integrity impact, and high availability impact.
Likely exposure
Exposure is likely limited to Linux systems using the Marvell Prestera driver and IPv4 routes that reference nexthops by ID. The provided affected data names Linux 6.1-era versions and stable fixes, but distribution-specific backport status is not provided.
Exploitation context
The CVE is not listed as KEV in the provided bundle, and no cited source claims active exploitation. The demonstrated trigger requires local privileges to change networking routes. Evidence points to availability risk through kernel warning or fault behavior, not remote compromise.
Researcher notes
The source bundle gives a concrete kernel warning trace and three stable commit references, but not full exploitability details beyond local route manipulation. Avoid broad claims: affected scope depends on Prestera hardware, loaded driver, kernel branch, and vendor backports.
Mitigation direction
- Update to a kernel containing the referenced stable Prestera fixes.
- Check OS vendor advisories for distribution backport status.
- Prioritize affected Prestera switch deployments over general Linux hosts.
- Restrict route-management privileges to trusted administrators.
- Monitor kernel logs for Prestera nexthop-related warnings.
Validation and detection
- Inventory systems loading the prestera or prestera_pci modules.
- Check kernel version and vendor patch level against stable references.
- Review routing configuration for IPv4 routes using nexthop IDs.
- Search kernel logs for __prestera_fi_is_direct warnings.
- Confirm vendor kernel includes the fib_info_nhc() fix.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2023-53342 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 5.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
SSVC decision data
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H1.83.6CISA-ADPVulnerability scoring details
Base CVSS 3.1 score
5.5MediumVector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/a3e5f3b7f25d7b90f3b76d98a946fec6e5f79216CVE reference, Linux
- https://git.kernel.org/stable/c/8373dca3c1f8a203cecebe3421dbe890c4f08e16CVE reference, Linux
- https://git.kernel.org/stable/c/2aa71b4b294ee2c3041d085404cea914be9b3225CVE reference, Linux
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.