CVE-2023-53600

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3+ #309

Description A flaw exists in the Linux kernel related to handling IPv4 Path MTU Discovery (PMTUD) errors within tunnels. Specifically, the ip compute csum() function is unable to process nonlinear skb structures, leading to a kernel slab-out-of-bounds error when attempting to generate an ICMP error message in response to a non-linear skb. This issue manifests as a KASAN splat and can cause processes, such as iperf3, to become unresponsive. The issue occurs when emitting an ICMP error. The vulnerable function is ip compute csum().

Recommendations Update to Linux kernel version 6.5.0-rc3+ #309 or a later version to resolve this issue.