CVE-2023-53354

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.123+

Description A flaw was discovered in the Linux kernel’s skbuff subsystem within the skb segment function. A change introduced by commit bf5c25d60861 incorrectly ordered the call to zero-copy functions, leading to a potential kernel panic. Specifically, calling skb orphan frags() could modify the number of fragments or allocate new fragments, resulting in nrfrags and frag pointing to outdated values. This could cause a NULL pointer dereference when attempting to access the next fragment, ultimately leading to a system crash. The issue occurs when using zero-copy functions before utilizing skbuff fragments and nrfrags.

Recommendations Update the Linux kernel to version 5.15.123+ or a later version to address this issue.