CVE-2023-53578

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to uninitialized variable access within the qrtr tx resume() function. The issue occurs due to an insufficient size check in qrtr endpoint post() when handling QRTR TYPE RESUME TX, leading to the use of an uninitialized variable. This condition is triggered under specific Syzbot scenarios. The qrtr tx resume() function and qrtr endpoint post() are involved in the process, and the skb->len variable requires a minimum size of sizeof(struct qrtr ctrl pkt). The vulnerability is related to the handling of network packets and the qrtr (Qualcomm Radio Transport) protocol.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.