PT-2025-53219 · Linux · Linux Kernel
Published
2023-06-24
·
Updated
2026-03-24
·
CVE-2023-54142
CVSS v2.0
7.7
High
| Vector | AV:A/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.4.0-rc5-01219-gfa0e21fa4443
Description
The Linux kernel contains a use-after-free issue within the gtp (Generic Tunneling Protocol) subsystem, specifically in the
gtp encap destroy() function. The issue occurs because release sock() is called after sock put() releases the last reference count, leading to a use-after-free condition. This was identified by syzkaller, which reported that the same process freed a socket (sk) and subsequently accessed it illegally. The commit e198987e7dd7 attempted to address this by adding lock sock() and release sock(), but the timing of release sock() remains problematic.Recommendations
Upgrade to Linux kernel version 6.4.0-rc5-01219-gfa0e21fa4443 or a later version to resolve this issue.
Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel