CVE-2023-53559

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-53559
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53559.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-53559
Downstream
Related
Published
2025-10-04T15:17:03.497Z
Modified
2026-04-11T12:46:49.903199Z
Summary
ip_vti: fix potential slab-use-after-free in decode_session6
Details

In the Linux kernel, the following vulnerability has been resolved:

ipvti: fix potential slab-use-after-free in decodesession6

When ipvti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ipvti device sends IPv6 packets. As commit f855691975bb ("xfrm6: Fix the nexthdr offset in decodesession6.") showed, xfrmdecodesession was originally intended only for the receive path. IP6CB(skb)->nhoff is not set during transmission. Therefore, set the cb field in the skb to 0 before sending packets.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53559.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f855691975bb06373a98711e4cfe2c224244b536
Fixed
82fb41c5de243e7dfa90f32ca58e35adaff56c1d
Fixed
7dfe23659f3677c08a60a0056cda2d91a79c15ca
Fixed
d34c30442d5e53a33cde79ca163320dbe2432cbd
Fixed
0b4d69539fdea138af2befe08893850c89248068
Fixed
e1e04cc2ef2c0c0866c19f5627149a76c2baae32
Fixed
2b05bf5dc437f7891dd409a3eaf5058459391c7a
Fixed
78e397a43e1c47321a4679cc49a6c4530bf820b9
Fixed
6018a266279b1a75143c7c0804dd08a5fc4c3e0b

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53559.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.19.0
Fixed
4.14.324
Type
ECOSYSTEM
Events
Introduced
4.15.0
Fixed
4.19.293
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.255
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.192
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.128
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.47
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.4.12

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53559.json"