PT-2025-40763 · Linux+1 · Linux Kernel+1

Published 2023-08-04 · Updated 2025-11-28 · CVE-2023-53600

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3+ #309

Description A flaw exists in the Linux kernel related to handling IPv4 Path MTU Discovery (PMTUD) errors within tunnels. Specifically, the ip compute csum() function is unable to process nonlinear skb structures, leading to a kernel slab-out-of-bounds error when attempting to generate an ICMP error message in response to a non-linear skb. This issue manifests as a KASAN splat and can cause processes, such as iperf3, to become unresponsive. The issue occurs when emitting an ICMP error. The vulnerable function is ip compute csum().

Recommendations Update to Linux kernel version 6.5.0-rc3+ #309 or a later version to resolve this issue.

Exploit

Fix

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

BDU:2026-04424

CVE-2023-53600

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4301-1

Affected Products

Linux Kernel

Suse

References · 1019

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53600.json · Exploit
• https://git.kernel.org/stable/c/fe6a9f7516735be9fdabab00e47ef7a3403a174d · Patch
• https://cve.org/CVERecord?id=CVE-2023-53600 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6a7ac3d20593865209dceb554d8b3f094c6bd940 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53600 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21052-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53600 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04424 · Security Note
• https://git.kernel.org/stable/c/5850c391fd7e25662334cb3cbf29a62bcbff1084 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53600 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4140-1 · Vendor Advisory