PT-2025-38204 · Linux+4 · Linux Kernel+4

Published

2023-09-01

·

Updated

2025-11-19

·

CVE-2023-53354

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.123+
Description A flaw was discovered in the Linux kernel’s skbuff subsystem within the skb segment function. A change introduced by commit bf5c25d60861 incorrectly ordered the call to zero-copy functions, leading to a potential kernel panic. Specifically, calling skb orphan frags() could modify the number of fragments or allocate new fragments, resulting in nrfrags and frag pointing to outdated values. This could cause a NULL pointer dereference when attempting to access the next fragment, ultimately leading to a system crash. The issue occurs when using zero-copy functions before utilizing skbuff fragments and nrfrags.
Recommendations Update the Linux kernel to version 5.15.123+ or a later version to address this issue.

Exploit

Fix

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
BDU:2026-02516
CESA-2024_3138
CVE-2023-53354
RHSA-2024:2394
RHSA-2024:3138
RHSA-2024:8157
RHSA-2024_2394
RHSA-2024_3138
RHSA-2025:21091
RHSA-2025:21136
SUSE-SU-2025:03600-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1

Affected Products

Astra Linux
Centos
Linux Kernel
Red Hat
Suse