BaseFortify

Publication date: 2025-10-07

Last updated on: 2026-02-26

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space. This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-07

Last Modified

2026-02-26

Generated

2026-07-06

AI Q&A

2025-10-07

EPSS Evaluated

2026-07-05

NVD

CVE-2023-53684

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.3
linux	linux_kernel	From 5.15.160 (inc) to 5.16 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of padding data when copying xfrm algorithms and encapsulation templates to user-space. Specifically, padding bytes in data structures were not zeroed out and could contain random, potentially sensitive data. This could lead to unintended exposure of sensitive kernel memory to user-space applications. The fix ensures that padding is zeroed before copying to user-space.

Impact Analysis

The vulnerability could lead to leakage of sensitive or random kernel memory data to user-space applications, potentially exposing confidential information or increasing the risk of information disclosure attacks.

Mitigation Strategies

Apply the patch or update to a Linux kernel version that includes the fix for this vulnerability, which ensures zero padding when dumping xfrm algorithms and encap templates to prevent leaking sensitive data to user-space.

Hi! I’m here to help you understand CVE-2023-53684. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70