PT-2025-38204 · Linux+4 · Linux Kernel+4
Published
2023-09-01
·
Updated
2025-11-19
·
CVE-2023-53354
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 5.15.123+
Description
A flaw was discovered in the Linux kernel’s
skbuff subsystem within the skb segment function. A change introduced by commit bf5c25d60861 incorrectly ordered the call to zero-copy functions, leading to a potential kernel panic. Specifically, calling skb orphan frags() could modify the number of fragments or allocate new fragments, resulting in nrfrags and frag pointing to outdated values. This could cause a NULL pointer dereference when attempting to access the next fragment, ultimately leading to a system crash. The issue occurs when using zero-copy functions before utilizing skbuff fragments and nrfrags.Recommendations
Update the Linux kernel to version 5.15.123+ or a later version to address this issue.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Centos
Linux Kernel
Red Hat
Suse