CVE-2023-53685

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a memory leak in the TUN device when NAPI and multi-queue were enabled, and the queue was detached. The issue occurred when skb structures were placed into the sk write queue after the queue was detached. The vulnerability was identified through syzkaller testing, which reported memory leaks related to sk and skb objects. The root cause was a missing check for tfile->detached before queuing skb structures. The issue could be triggered by opening a TUN device with NAPI and multi-queue enabled, detaching the queue, and then writing to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.