CVE-2023-53684
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-07

Last updated on: 2026-02-26

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space. This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-07
Last Modified
2026-02-26
Generated
2026-06-16
AI Q&A
2025-10-07
EPSS Evaluated
2026-06-15
NVD
CVE-2023-53684
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
linux linux_kernel 6.3
linux linux_kernel From 5.15.160 (inc) to 5.16 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of padding data when copying xfrm algorithms and encapsulation templates to user-space. Specifically, padding bytes in data structures were not zeroed out and could contain random, potentially sensitive data. This could lead to unintended exposure of sensitive kernel memory to user-space applications. The fix ensures that padding is zeroed before copying to user-space.

Impact Analysis

The vulnerability could lead to leakage of sensitive or random kernel memory data to user-space applications, potentially exposing confidential information or increasing the risk of information disclosure attacks.

Mitigation Strategies

Apply the patch or update to a Linux kernel version that includes the fix for this vulnerability, which ensures zero padding when dumping xfrm algorithms and encap templates to prevent leaking sensitive data to user-space.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-53684. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart