CVE-2023-53559
BaseFortify
Publication date: 2025-10-04
Last updated on: 2026-03-21
Assigner: kernel.org
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | 6.5 |
| linux | linux_kernel | From 4.15 (inc) to 4.19.293 (exc) |
| linux | linux_kernel | From 4.20 (inc) to 5.4.255 (exc) |
| linux | linux_kernel | From 5.11 (inc) to 5.15.128 (exc) |
| linux | linux_kernel | From 5.16 (inc) to 6.1.47 (exc) |
| linux | linux_kernel | From 5.5 (inc) to 5.10.192 (exc) |
| linux | linux_kernel | From 6.2 (inc) to 6.4.12 (exc) |
| linux | linux_kernel | 3.19 |
| linux | linux_kernel | 3.19 |
| linux | linux_kernel | From 3.19.1 (inc) to 4.14.324 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-416 | The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory "belongs" to the code that operates on the new pointer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a potential slab-use-after-free issue in the Linux kernel's ip_vti device when sending IPv6 packets. Specifically, when the ip_vti device is set to use the sfb type qdisc, the control block (cb) field of the sent socket buffer (skb) may be modified during enqueuing. Since the cb field is not properly reset before sending, this can lead to use-after-free errors. The fix involves setting the cb field in the skb to zero before sending packets to prevent this issue.
What immediate steps should I take to mitigate this vulnerability?
Apply the patch that fixes the slab-use-after-free vulnerability in the Linux kernel related to ip_vti and the sfb qdisc. Specifically, ensure your Linux kernel includes the commit that sets the cb field in the skb to 0 before sending IPv6 packets, as described in the fix for decode_session6.
How can this vulnerability impact me? :
This vulnerability can cause memory corruption due to a use-after-free condition in the kernel when sending IPv6 packets via the ip_vti device. This could potentially lead to system instability, crashes, or exploitation by attackers to execute arbitrary code or cause denial of service.