CVE-2023-53109
published 2025-05-02CVE-2023-53109: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparently…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.19%
8.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
net: tunnels: annotate lockless accesses to dev->needed_headroom
IP tunnels can apparently update dev->needed_headroom
in their xmit path.
This patch takes care of three tunnels xmit, and also the
core LL_RESERVED_SPACE() and LL_RESERVED_SPACE_EXTRA()
helpers.
More changes might be needed for completeness.
BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
read to 0xffff88815b9da0ec of 2 bytes by task 888 on cpu 1:
ip_tunnel_xmit+0x1270/0x1730 net/ipv4/ip_tunnel.c:803
__gre_xmit net/ipv4/ip_gre.c:469 [inline]
ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661
__netdev_start_xmit include/linux/netdevice.h:4881 [inline]
netdev_start_xmit include/linux/netdevice.h:4895 [inline]
xmit_one net/core/dev.c:3580 [inline]
dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596
__dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246
dev_queue_xmit include/linux/netdevice.h:3051 [inline]
neigh_direct_output+0x17/0x20 net/core/neighbour.c:1623
neigh_output include/net/neighbour.h:546 [inline]
ip_finish_output2+0x740/0x840 net/ipv4/ip_output.c:228
ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:316
NF_HOOK_COND include/linux/netfilter.h:291 [inline]
ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:430
dst_output include/net/dst.h:444 [inline]
ip_local_out+0x64/0x80 net/ipv4/ip_output.c:126
iptunnel_xmit+0x34a/0x4b0 net/ipv4/ip_tunnel_core.c:82
ip_tunnel_xmit+0x1451/0x1730 net/ipv4/ip_tunnel.c:813
__gre_xmit net/ipv4/ip_gre.c:469 [inline]
ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661
__netdev_start_xmit include/linux/netdevice.h:4881 [inline]
netdev_start_xmit include/linux/netdevice.h:4895 [inline]
xmit_one net/core/dev.c:3580 [inline]
dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596
__dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246
dev_queue_xmit include/linux/netdevice.h:3051 [inline]
neigh_direct_output+0x17/0x20 net/core/neighbour.c:1623
neigh_output include/net/neighbour.h:546 [inline]
ip_finish_output2+0x740/0x84
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < 8e206f66d824b3b28a7f9ee1366dfc79a937bb46 | 8e206f66d824b3b28a7f9ee1366dfc79a937bb46 |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < 51f3bd3765bc5ca4583af07a00833da00d2ace1d | 51f3bd3765bc5ca4583af07a00833da00d2ace1d |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < 5aaab217c8f5387b9c5fff9e940d80f135e04366 | 5aaab217c8f5387b9c5fff9e940d80f135e04366 |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < be59b87ee4aed81db7c10e44f603866a0ac3ca5d | be59b87ee4aed81db7c10e44f603866a0ac3ca5d |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < e0a557fc1daf5c1086e47150a4571aebadbb62be | e0a557fc1daf5c1086e47150a4571aebadbb62be |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < a69b72b57b7d269e833e520ba7500d556e8189b6 | a69b72b57b7d269e833e520ba7500d556e8189b6 |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < 9b86a8702b042ee4e15d2d46375be873a6a8834f | 9b86a8702b042ee4e15d2d46375be873a6a8834f |
| linux | linux | >= 8eb30be0352d09165e94a41fef1c7b994dca0714 < 4b397c06cb987935b1b097336532aa6b4210e091 | 4b397c06cb987935b1b097336532aa6b4210e091 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 4.15 < 4.19.279 | 4.19.279 |
| linux | linux_kernel | >= 4.20 < 5.4.238 | 5.4.238 |
| linux | linux_kernel | >= 4.7 < 4.14.311 | 4.14.311 |
| linux | linux_kernel | >= 5.11 < 5.15.104 | 5.15.104 |
| linux | linux_kernel | >= 5.16 < 6.1.21 | 6.1.21 |
| linux | linux_kernel | >= 5.5 < 5.10.176 | 5.10.176 |
| linux | linux_kernel | >= 6.2 < 6.2.8 | 6.2.8 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: net: tunnels: annotate lockless accesses to dev->needed_headroom
vendor_redhat·2025-05-02·CVSS 5.5
CVE-2023-53109 [MEDIUM] kernel: net: tunnels: annotate lockless accesses to dev->needed_headroom
kernel: net: tunnels: annotate lockless accesses to dev->needed_headroom
In the Linux kernel, the following vulnerability has been resolved:
net: tunnels: annotate lockless accesses to dev->needed_headroom
IP tunnels can apparently update dev->needed_headroom
in their xmit path.
This patch takes care of three tunnels xmit, and also the
core LL_RESERVED_SPACE() and LL_RESERVED_SPACE_EXTRA()
helpers.
More changes might be needed for completeness.
BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
read to 0xffff88815b9da0ec of 2 bytes by task 888 on cpu 1:
ip_tunnel_xmit+0x1270/0x1730 net/ipv4/ip_tunnel.c:803
__gre_xmit net/ipv4/ip_gre.c:469 [inline]
ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661
__netdev_start_xmit include/linux/netdevice.h:4881 [inline]
netdev_start_xmit include/linux/
Debian
CVE-2023-53109: linux - In the Linux kernel, the following vulnerability has been resolved: net: tunnel...
vendor_debian·2023·CVSS 5.5
CVE-2023-53109 [MEDIUM] CVE-2023-53109: linux - In the Linux kernel, the following vulnerability has been resolved: net: tunnel...
In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparently update dev->needed_headroom in their xmit path. This patch takes care of three tunnels xmit, and also the core LL_RESERVED_SPACE() and LL_RESERVED_SPACE_EXTRA() helpers. More changes might be needed for completeness. BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit read to 0xffff88815b9da0ec of 2 bytes by task 888 on cpu 1: ip_tunnel_xmit+0x1270/0x1730 net/ipv4/ip_tunnel.c:803 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4881 [inline] netdev_start_xmit include/linux/netdevice.h:4895 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_s
GHSA
GHSA-873c-438h-rqmq: In the Linux kernel, the following vulnerability has been resolved:
net: tunnels: annotate lockless accesses to dev->needed_headroom
IP tunnels can
ghsa_unreviewed·2025-05-02
CVE-2023-53109 [MEDIUM] GHSA-873c-438h-rqmq: In the Linux kernel, the following vulnerability has been resolved:
net: tunnels: annotate lockless accesses to dev->needed_headroom
IP tunnels can
In the Linux kernel, the following vulnerability has been resolved:
net: tunnels: annotate lockless accesses to dev->needed_headroom
IP tunnels can apparently update dev->needed_headroom
in their xmit path.
This patch takes care of three tunnels xmit, and also the
core LL_RESERVED_SPACE() and LL_RESERVED_SPACE_EXTRA()
helpers.
More changes might be needed for completeness.
BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit
read to 0xffff88815b9da0ec of 2 bytes by task 888 on cpu 1:
ip_tunnel_xmit+0x1270/0x1730 net/ipv4/ip_tunnel.c:803
__gre_xmit net/ipv4/ip_gre.c:469 [inline]
ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661
__netdev_start_xmit include/linux/netdevice.h:4881 [inline]
netdev_start_xmit include/linux/netdevice.h:4895 [inline]
xmit_one net/core/dev.c:3580 [inline]
dev_
OSV
CVE-2023-53109: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can ap
osv·2025-05-02·CVSS 5.5
CVE-2023-53109 [MEDIUM] CVE-2023-53109: In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can ap
In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparently update dev->needed_headroom in their xmit path. This patch takes care of three tunnels xmit, and also the core LL_RESERVED_SPACE() and LL_RESERVED_SPACE_EXTRA() helpers. More changes might be needed for completeness. BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit read to 0xffff88815b9da0ec of 2 bytes by task 888 on cpu 1: ip_tunnel_xmit+0x1270/0x1730 net/ipv4/ip_tunnel.c:803 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4881 [inline] netdev_start_xmit include/linux/netdevice.h:4895 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_s
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/4b397c06cb987935b1b097336532aa6b4210e091https://git.kernel.org/stable/c/51f3bd3765bc5ca4583af07a00833da00d2ace1dhttps://git.kernel.org/stable/c/5aaab217c8f5387b9c5fff9e940d80f135e04366https://git.kernel.org/stable/c/8e206f66d824b3b28a7f9ee1366dfc79a937bb46https://git.kernel.org/stable/c/9b86a8702b042ee4e15d2d46375be873a6a8834fhttps://git.kernel.org/stable/c/a69b72b57b7d269e833e520ba7500d556e8189b6https://git.kernel.org/stable/c/be59b87ee4aed81db7c10e44f603866a0ac3ca5dhttps://git.kernel.org/stable/c/e0a557fc1daf5c1086e47150a4571aebadbb62be
2025-05-02
Published