CVE-2023-53372
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
sctp: fix a potential overflow in sctp_ifwdtsn_skip
In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctp_ifwdtsn_skip Currently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference it as struct sctp_ifwdtsn_skip may cause coverflow. This patch fixes it by checking the pos against "the end of the chunk - sizeof(struct sctp_ifwdtsn_skip)" in sctp_ifwdtsn_skip, similar to sctp_fwdtsn_skip.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | 4fbd094d4131a10d06a45d64158567052a35b3f4 | Unavailable | None listed |
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | ad831a7079c99c01e801764b53bc9997c2e9c0f7 | Unavailable | None listed |
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | 79b28f42214a3d0d6a8c514db3602260bd5d6cb5 | Unavailable | None listed |
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | 6109f5b13ce3e3e537db6f18976ec0e9118d1c6f | Unavailable | None listed |
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | 5c9367ac5a22d71841bcd00130f9146c9b227d57 | Unavailable | None listed |
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | ad988e9b5ff04607e624a459209e8c2d0c15fc73 | Unavailable | None listed |
| 0fc2ea922c8ad5520c80f03facbf396c81dce802 | affected | git | 32832a2caf82663870126c5186cf8f86c8b2a649 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.16 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.16 | Unavailable | None listed |
| 4.19.281 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.241 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.178 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.108 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.25 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.2.12 | unaffected | semver | Unavailable | 6.2.* | None listed |
| 6.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |