CVE-2023-53600 — Out-of-bounds Read in Linux

CWE-125 — Out-of-bounds Read5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 97.02%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
LinuxLinux KernelDebian Linux
Timeline
PublishedOct 4

Description

In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp error in response to a nonliner skb, we get BUG: KASAN: slab-out-of-bounds in ip_compute_csum+0x134/0x220 Read of size 4 at addr ffff88811c50db00 by task iperf3/1691 CPU: 2 PID: 1691 Comm: iperf3 Not tainted 6.5.0-rc3+ #309 [..] kasan_report+0x105/0x140 ip_compute_csum+0x134/0x220 iptunnel_pmtud_build_icmp+0x554/0x1020 skb_tunnel_check_pmtu+0x5…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

▶NVDlinux/linux_kernel5.9 — 5.10.191+4
▶Debianlinux/linux_kernel< 5.10.191-1+3
▶CVEListV5linux/linux4cb47a8644cc9eb8ec81190a50e79e6530d0297f — 5850c391fd7e25662334cb3cbf29a62bcbff1084+5
▶debiandebian/linux< linux 6.1.52-1 (bookworm)

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

2
OSV
CVE-2023-53600: In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp↗2025-10-04
▶
GHSA
GHSA-qh3w-rq3m-fpq5: In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an ic↗2025-10-04
▶

📋Vendor Advisories

2
Red Hat
kernel: tunnels: fix kasan splat when generating ipv4 pmtu error↗2025-10-04
▶
Debian
CVE-2023-53600: linux - In the Linux kernel, the following vulnerability has been resolved: tunnels: fi...↗2023
▶