CVE-2023-53500

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-next-20230707 #409

Description The Linux kernel contains a flaw in the xfrm subsystem, specifically within the decode session6 function. When the xfrm device is configured with a qdisc of the sfb type, the cb field of a sent skb (socket buffer) may be altered during enqueuing. This can lead to a slab-use-after-free condition when the xfrm device transmits IPv6 packets. The issue occurs because the cb field is not properly initialized before packet transmission, potentially causing memory corruption. The stack trace indicates the issue is triggered during IPv6 packet processing, specifically within the ndisc send rs function related to neighbor discovery.

Recommendations Update the Linux kernel to version 6.4.0-next-20230707 #409 or a later version that includes the fix.