CVE-2023-53559: ip_vti: fix potential slab-use-after-free in decode_session6
In the Linux kernel, the following vulnerability has been resolved:
ipvti: fix potential slab-use-after-free in decodesession6
When ipvti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ipvti device sends IPv6 packets. As commit f855691975bb ("xfrm6: Fix the nexthdr offset in decodesession6.") showed, xfrmdecodesession was originally intended only for the receive path. IP6CB(skb)->nhoff is not set during transmission. Therefore, set the cb field in the skb to 0 before sending packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53559?
CVE-2023-53559 has been classified with a moderate severity level due to the potential for a slab-use-after-free vulnerability.
How do I fix CVE-2023-53559?
To remediate CVE-2023-53559, update the Linux kernel to the latest patched version provided by your distribution.
What systems are affected by CVE-2023-53559?
CVE-2023-53559 affects the Linux kernel, specifically when using the ip_vti device set to the sfb type qdisc.
What kind of attacks can exploit CVE-2023-53559?
Exploitation of CVE-2023-53559 could potentially allow an attacker to execute arbitrary code in kernel space due to the slab-use-after-free vulnerability.
When was CVE-2023-53559 disclosed?
CVE-2023-53559 was disclosed as a vulnerability in the Linux kernel's handling of ip_vti devices.