-
CVE-2023-53825
- EPSS 0.02%
- Veröffentlicht 09.12.2025 01:29:38
- Zuletzt bearbeitet 09.12.2025 18:37:13
- Quelle 416baaa9-dc9f-4396-8d5f-8c081f
- CVE-Watchlists
- Unerledigt
In the Linux kernel, the following vulnerability has been resolved:
kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
syzkaller found a memory leak in kcm_sendmsg(), and commit c821a88bd720
("kcm: Fix memory leak in error path of kcm_sendmsg()") suppressed it by
updating kcm_tx_msg(head)->last_skb if partial data is copied so that the
following sendmsg() will resume from the skb.
However, we cannot know how many bytes were copied when we get the error.
Thus, we could mess up the MSG_MORE queue.
When kcm_sendmsg() fails for SOCK_DGRAM, we should purge the queue as we
do so for UDP by udp_flush_pending_frames().
Even without this change, when the error occurred, the following sendmsg()
resumed from a wrong skb and the queue was messed up. However, we have
yet to get such a report, and only syzkaller stumbled on it. So, this
can be changed safely.
Note this does not change SOCK_SEQPACKET behaviour.Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version <
21b467735b0888a8daa048f83d3b9b50fdab71ce
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
d4b8f380b0a041ee6a84fdac14127d8fe1dcad7b
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
1ce8362b4ac6b8e65fd04a22ea37ec776ee1ec5b
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
2e18493c421428a936946c452461b8e979088f17
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
55d2e7c1ab8eaa7b62575b8a4194132795d1f9fc
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
e5b28ce127a690f3acc49a6a342e6c9442c9edd6
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
992b2ac783aad360b98ed9d4686e86176a20f6f1
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
Version <
a22730b1b4bf437c6bbfdeff5feddf54be4aeada
Version
ab7ac4eb9832e32a09f4e8042705484d2fb0aad3
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
4.6
Status
affected
Version <
4.6
Version
0
Status
unaffected
Version <=
4.14.*
Version
4.14.326
Status
unaffected
Version <=
4.19.*
Version
4.19.295
Status
unaffected
Version <=
5.4.*
Version
5.4.257
Status
unaffected
Version <=
5.10.*
Version
5.10.195
Status
unaffected
Version <=
5.15.*
Version
5.15.132
Status
unaffected
Version <=
6.1.*
Version
6.1.54
Status
unaffected
Version <=
6.5.*
Version
6.5.4
Status
unaffected
Version <=
*
Version
6.6
Status
unaffected
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.058 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|