CVE-2023-53660

Name of the Vulnerable Software and Affected Versions Linux kernel version 6.5.0-rc2+

Description An issue exists in the BPF cpumap module where the cpu map ring cleanup() function fails to handle skb mode, incorrectly treating skbs in the ptr ring as XDP frames. This behavior, combined with the premature stopping of the cpu map kthread run() kthread, can lead to incorrect XDP memory type usage and may allow an attacker to cause a denial of service.

Recommendations Update the Linux kernel to a version where the cpu map ring cleanup() function is patched to correctly handle and free skbs in the ptr ring.