PT-2025-40701 · Linux+3 · Linux Kernel+3
Published
2023-07-11
·
Updated
2025-12-04
·
CVE-2023-53559
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel related to the ip vti device and the decode session6 function. Specifically, when the ip vti device is configured with the sfb qdisc type, the
cb field of a sent socket buffer (skb) may be altered during the queuing process. This can lead to a slab-use-after-free condition when IPv6 packets are transmitted. The issue arises because the IP6CB(skb)->nhoff field is not set during transmission, and the cb field needs to be set to 0 before sending packets to prevent this condition.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Centos
Linux Kernel
Red Hat
Suse