CVE-2023-54094

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0 #364

Description The Linux kernel contained a flaw where segmentation of packets using rx-gro-list could lead to skb corruption due to unsafe writes to cloned skbs with shared heads. This issue occurred when packets were processed through a bridge and directed to both a local input path and an egress device (tun). The correction involves uncloning skbs as needed before segmentation to prevent the corruption.

Recommendations Update the Linux kernel to version 6.4.0 #364 or later.