CVE-2023-53752

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An integer overflow issue exists in the kmalloc reserve() function within the net/core/skbuff.c module. When the size variable exceeds 0x80000001, the kmalloc size roundup() function returns 2^32. Because kmalloc reserve() utilizes a 32-bit variable obj size, this value is truncated to 0, leading kmalloc(0) to return a ZERO SIZE PTR that is not properly handled by skb allocations. This condition can be triggered if netdev->mtu is set close to 0x7fffffff, potentially resulting in a system crash and denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.