CVE-2023-53559
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ip_vti: fix potential slab-use-after-free in decode_session6
In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ip_vti device sends IPv6 packets. As commit f855691975bb ("xfrm6: Fix the nexthdr offset in _decode_session6.") showed, xfrm_decode_session was originally intended only for the receive path. IP6CB(skb)->nhoff is not set during transmission. Therefore, set the cb field in the skb to 0 before sending packets.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | 82fb41c5de243e7dfa90f32ca58e35adaff56c1d | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | 7dfe23659f3677c08a60a0056cda2d91a79c15ca | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | d34c30442d5e53a33cde79ca163320dbe2432cbd | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | 0b4d69539fdea138af2befe08893850c89248068 | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | e1e04cc2ef2c0c0866c19f5627149a76c2baae32 | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | 2b05bf5dc437f7891dd409a3eaf5058459391c7a | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | 78e397a43e1c47321a4679cc49a6c4530bf820b9 | Unavailable | None listed |
| f855691975bb06373a98711e4cfe2c224244b536 | affected | git | 6018a266279b1a75143c7c0804dd08a5fc4c3e0b | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.19 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 3.19 | Unavailable | None listed |
| 4.14.324 | unaffected | semver | Unavailable | 4.14.* | None listed |
| 4.19.293 | unaffected | semver | Unavailable | 4.19.* | None listed |
| 5.4.255 | unaffected | semver | Unavailable | 5.4.* | None listed |
| 5.10.192 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.128 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.47 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.4.12 | unaffected | semver | Unavailable | 6.4.* | None listed |
| 6.5 | unaffected | original_commit_for_fix | Unavailable | * | None listed |