CVE-2023-53600

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53600
In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp error in response to a nonliner skb, we get BUG: KASAN: slab-out-of-bounds in ip_compute_csum+0x134/0x220 Read of size 4 at addr ffff88811c50db00 by task iperf3/1691 CPU: 2 PID: 1691 Comm: iperf3 Not tainted 6.5.0-rc3+ #309 [..] kasan_report+0x105/0x140 ip_compute_csum+0x134/0x220 iptunnel_pmtud_build_icmp+0x554/0x1020 skb_tunnel_check_pmtu+0x513/0xb80 vxlan_xmit_one+0x139e/0x2ef0 vxlan_xmit+0x1867/0x2760 dev_hard_start_xmit+0x1ee/0x4f0 br_dev_queue_push_xmit+0x4d1/0x660 [..] ip_compute_csum() cannot deal with nonlinear skbs, so avoid it. After this change, splat is gone and iperf3 is no longer stuck.

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/5850c391fd7e25662334cb3cbf29a62bcbff1084 Patch
https://git.kernel.org/stable/c/6a7ac3d20593865209dceb554d8b3f094c6bd940 Patch
https://git.kernel.org/stable/c/da5f42a6e7485fbb7a6dbd6a2b3045e19e4df5cc Patch
https://git.kernel.org/stable/c/e95808121953410db8c59f0abfde70ac0d34222c Patch
https://git.kernel.org/stable/c/fe6a9f7516735be9fdabab00e47ef7a3403a174d Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
History

06 Feb 2026, 14:07

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/5850c391fd7e25662334cb3cbf29a62bcbff1084 - () https://git.kernel.org/stable/c/5850c391fd7e25662334cb3cbf29a62bcbff1084 - Patch
References () https://git.kernel.org/stable/c/6a7ac3d20593865209dceb554d8b3f094c6bd940 - () https://git.kernel.org/stable/c/6a7ac3d20593865209dceb554d8b3f094c6bd940 - Patch
References () https://git.kernel.org/stable/c/da5f42a6e7485fbb7a6dbd6a2b3045e19e4df5cc - () https://git.kernel.org/stable/c/da5f42a6e7485fbb7a6dbd6a2b3045e19e4df5cc - Patch
References () https://git.kernel.org/stable/c/e95808121953410db8c59f0abfde70ac0d34222c - () https://git.kernel.org/stable/c/e95808121953410db8c59f0abfde70ac0d34222c - Patch
References () https://git.kernel.org/stable/c/fe6a9f7516735be9fdabab00e47ef7a3403a174d - () https://git.kernel.org/stable/c/fe6a9f7516735be9fdabab00e47ef7a3403a174d - Patch
First Time Linux
Linux linux Kernel
CWE CWE-125
CPE cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1

04 Oct 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-10-04 16:15

Updated : 2026-02-06 14:07

NVD link : CVE-2023-53600

Mitre link : CVE-2023-53600

CVE.ORG link : CVE-2023-53600

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-125

Out-of-bounds Read