Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H H H 7.8 .0028 20.4 —
AFFECTED Product Versions Fixed Linux f4f9ef4a1b0a1ca80b152e28e176d69515bdf7e8 – — Linux 4.14 – 5.10.220
TIMELINE Oct 7 Reserved by Linux Oct 7 Published (CNA: Linux) Aug 4 RESCORED — CVE-2023-53680 (Linux). CVSS 7.5 → 7.8 (NVD).
In the Linux kernel, the following vulnerability has been resolved: NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL OPDESC() simply indexes into nfsd4_ops[] by the op's operation number, without range checking that value. It assumes callers are careful to avoid calling it with an out-of-bounds opnum value. nfsd4_decode_compound() is not so careful, and can invoke OPDESC() with opnum set to OP_ILLEGAL, which is 10044 -- well beyond the end of nfsd4_ops[].
| Date | Event | Detail |
|---|---|---|
| October 7, 2025 | Reserved | Reserved by Linux |
| October 7, 2025 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2023-53680 (Linux). CVSS 7.5 → 7.8 (NVD). |
Authoritative record: CVE-2023-53680 at cve.org
Vendors: linux
Weaknesses: CWE-787
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2023-53680 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.