CVE-2023-53020

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the l2tp tunnel register() function. The issue involved several race conditions, including modifying the tunnel socket after publishing it, calling setup udp tunnel sock() on an existing socket without locking, and changing the sock lock class, which triggered many syzbot reports. The patch addresses these issues by moving socket initialization code before publishing and under the sock lock.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.