PT-2025-18817 · Linux+3 · Linux Kernel+3

Published 2023-03-20 · Updated 2026-01-28 · CVE-2023-53053

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the use of skb mac header() in ndo start xmit(). Drivers should not assume skb mac header(skb) == skb->data in their ndo start xmit(). Instead, skb network offset() and skb transport offset() should be used, which better describe what is needed in erspan fb xmit() and ip6erspan tunnel xmit(). A warning was reported by syzbot, indicating a potential issue in the ip6erspan tunnel xmit() function.

Recommendations As a temporary workaround, consider disabling the ip6erspan tunnel xmit() function until a patch is available. Update to a version of the Linux kernel that includes the fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

ALSA-2025_16880

BDU:2025-06767

CVE-2023-53053

OESA-2025-1726

RHSA-2023:6583

RHSA-2023_6583

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

References · 38

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53053.json · Exploit
• https://git.kernel.org/stable/c/8e50ed774554f93d55426039b27b1e38d7fa64d8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50203 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53053 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53053 · Vendor Advisory
• https://git.kernel.org/stable/c/b41f37dbd9cdb60000e3b0dfad6df787591c2265 · Patch
• https://git.kernel.org/stable/c/f8cec30541f5c5cc218e9a32138d45d227727f2f · Patch
• https://git.kernel.org/stable/c/da149daf821a3c05cd04f7c60776c86c5ee9685c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49814 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49917 · Security Note
• https://git.kernel.org/stable/c/5d4172732f0ee1639a361a6cc5c3114bbb397386 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53053 · Security Note
• https://git.kernel.org/stable/c/9c7d6803689c99d55bbb862260d0ba486ff23c0b · Patch
• https://bdu.fstec.ru/vul/2025-06767 · Security Note
• https://git.kernel.org/stable/c/b72f453e886af532bde1fd049a2d2421999630d3 · Patch