PT-2025-49669 · Linux · Linux Kernel

Publicado

2025-12-09

·

Atualizado

2026-01-28

·

CVE-2023-53809

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc5-00205-gc96618275234 #56
Description The Linux kernel contains a flaw in the l2tp implementation that can lead to a recursive deadlock within the l2tp tunnel register() function. This occurs when a file descriptor of a pppol2tp socket is passed as a file descriptor of a UDP socket. The issue is triggered by a specific program that attempts to connect using this configuration, resulting in a lock dependency warning and a potential system hang. The l2tp tunnel register() function and pppol2tp connect() are involved in the deadlock scenario.
Recommendations Update to a version later than 6.2.0-rc5-00205-gc96618275234 #56.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2023-53809
RHSA-2023:2458
SUSE-SU-2026:0316-1

Produtos afetados

Linux Kernel