PT-2025-40207 · Linux+1 · Linux Kernel+1
Published
2023-07-10
·
Updated
2025-12-04
·
CVE-2023-53500
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.4.0-next-20230707 #409
Description
The Linux kernel contains a flaw in the xfrm subsystem, specifically within the
decode session6 function. When the xfrm device is configured with a qdisc of the sfb type, the cb field of a sent skb (socket buffer) may be altered during enqueuing. This can lead to a slab-use-after-free condition when the xfrm device transmits IPv6 packets. The issue occurs because the cb field is not properly initialized before packet transmission, potentially causing memory corruption. The stack trace indicates the issue is triggered during IPv6 packet processing, specifically within the ndisc send rs function related to neighbor discovery.Recommendations
Update the Linux kernel to version 6.4.0-next-20230707 #409 or a later version that includes the fix.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Suse