CVE-2023-53824 — Linux vulnerability
7 documents6 sources
Severity
4.7MEDIUM
No vectorEPSS
0.0%
top 89.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
netlink: annotate lockless accesses to nlk->max_recvmsg_len
syzbot reported a data-race in data-race in netlink_recvmsg() [1]
Indeed, netlink_recvmsg() can be run concurrently,
and netlink_dump() also needs protection.
[1]
BUG: KCSAN: data-race in netlink_recvmsg / netlink_recvmsg
read to 0xffff888141840b38 of 8 bytes by task 23057 on cpu 0:
netlink_recvmsg+0xea/0x730 net/netlink/af_netlink.c:1988
sock_recvmsg_nosec net/soc…
Affected Packages4 packages
▶CVEListV5linux/linux9063e21fb026c4966fc93261c18322214f9835eb — 05c9e3fc93b02d18c3ab258d43350a6d44b40bbd+5
🔴Vulnerability Details
3GHSA▶
GHSA-74c2-58xj-46fw: In the Linux kernel, the following vulnerability has been resolved:
netlink: annotate lockless accesses to nlk->max_recvmsg_len
syzbot reported a da↗2025-12-09
OSV▶
CVE-2023-53824: In the Linux kernel, the following vulnerability has been resolved: netlink: annotate lockless accesses to nlk->max_recvmsg_len syzbot reported a data↗2025-12-09