-

CVE-2023-53825

In the Linux kernel, the following vulnerability has been resolved:

kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().

syzkaller found a memory leak in kcm_sendmsg(), and commit c821a88bd720
("kcm: Fix memory leak in error path of kcm_sendmsg()") suppressed it by
updating kcm_tx_msg(head)->last_skb if partial data is copied so that the
following sendmsg() will resume from the skb.

However, we cannot know how many bytes were copied when we get the error.
Thus, we could mess up the MSG_MORE queue.

When kcm_sendmsg() fails for SOCK_DGRAM, we should purge the queue as we
do so for UDP by udp_flush_pending_frames().

Even without this change, when the error occurred, the following sendmsg()
resumed from a wrong skb and the queue was messed up.  However, we have
yet to get such a report, and only syzkaller stumbled on it.  So, this
can be changed safely.

Note this does not change SOCK_SEQPACKET behaviour.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version < 21b467735b0888a8daa048f83d3b9b50fdab71ce
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < d4b8f380b0a041ee6a84fdac14127d8fe1dcad7b
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < 1ce8362b4ac6b8e65fd04a22ea37ec776ee1ec5b
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < 2e18493c421428a936946c452461b8e979088f17
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < 55d2e7c1ab8eaa7b62575b8a4194132795d1f9fc
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < e5b28ce127a690f3acc49a6a342e6c9442c9edd6
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < 992b2ac783aad360b98ed9d4686e86176a20f6f1
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
Version < a22730b1b4bf437c6bbfdeff5feddf54be4aeada
Version ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 4.6
Status affected
Version < 4.6
Version 0
Status unaffected
Version <= 4.14.*
Version 4.14.326
Status unaffected
Version <= 4.19.*
Version 4.19.295
Status unaffected
Version <= 5.4.*
Version 5.4.257
Status unaffected
Version <= 5.10.*
Version 5.10.195
Status unaffected
Version <= 5.15.*
Version 5.15.132
Status unaffected
Version <= 6.1.*
Version 6.1.54
Status unaffected
Version <= 6.5.*
Version 6.5.4
Status unaffected
Version <= *
Version 6.6
Status unaffected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.02% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String