PT-2025-38445 · Linux+2 · Linux Kernel+2
Published
2023-08-31
·
Updated
2025-12-11
·
CVE-2023-53426
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free error exists in the xsk diag interface when a socket is unbound from the device, potentially occurring during socket closure or device disappearance. The issue stems from the xsk diagnostics code continuing to use an outdated method for determining if a socket is unbound, leading to improper handling when a socket is being closed. The fix involves testing against a state variable (XSK UNBOUND) to correctly abort the netlink operation.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Resource Release
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Suse