PT-2025-53049 · Linux · Linux Kernel
Published
2023-08-17
·
Updated
2026-03-24
·
CVE-2023-54051
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.0-rc5-next-20230809-syzkaller
Description
A missing check in
virtio net hdr to skb() allowed a kernel crash. Specifically, the issue arises when gso size is set to GSO BY FRAGS (0xffff), a magic value used internally by the kernel. This can lead to a general protection fault and potential kernel crashes, as demonstrated by syzbot. The vulnerable code is located in the skb segment function within net/core/skbuff.c.Recommendations
Update to a version newer than 6.5.0-rc5-next-20230809-syzkaller.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel