CVE-2023-52610

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.7.0-rc3

Description The Linux kernel has a vulnerability in the net/sched module, specifically in the act ct function. This function adds a reference to the skb (socket buffer) before defragmentation, which can lead to a crash when the skb is cloned and shared at the same time. The issue arises when fragments arrive out of order, causing the last fragment's reference to be reset, resulting in a memory leak. The situation worsens when packet capture is initiated, leading to a crash. The vulnerability is fixed by removing the skb get() call before defragmentation.

Recommendations For Linux kernel versions prior to 6.7.0-rc3, update to a newer version that includes the fix for this vulnerability. If updating is not possible, consider disabling the act ct function or restricting its use to minimize the risk of exploitation. Additionally, avoid using the skb clone() function in conjunction with act ct to prevent the crash.