SECUFOCUSNOW
Home›CVE index›CVE-2023-53088
Review reviewHigh

CVE-2023-53088

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the passive socket initialization, the mptcp listener shutdown path is prone to an UaF issue. BUG: KASAN: use-after-free in _raw_spin_lock_bh+0x73/0xe0 Write of size 4 at addr ffff88810cb23098 by task syz-executor731/1266 CPU: 1 PID: 1266 Comm: syz-executor731 Not tainted 6.2.0-rc59af4eaa31c1f6c00c8f1e448ed99a45c66340dd5 #6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Ca...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2025.05.03
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: mptcp: fix UaF in listener shutdown As reported by Christoph after having refactored the passive socket initialization, the mptcp listener shutdown path is prone to an UaF issue. BUG: KASAN: use-after-free in _raw_spin_lock_bh+0x73/0xe0 Write of size 4 at addr ffff88810cb23098 by task syz-executor731/1266 CPU: 1 PID: 1266 Comm: syz-executor731 Not tainted 6.2.0-rc59af4eaa31c1f6c00c8f1e448ed99a45c66340dd5 #6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Ca...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 6aeed9045071f2252ff4e98fc13d1e304f33e5b0 < 5564be74a22a61855f8b8c100d8c4abb003bb792, >= 6aeed9045071f2252ff4e98fc13d1e304f33e5b0 < 0f4f4cf5d32f10543deb946a37111e714579511e, >= 6aeed9045071f2252ff4e98fc13d1e304f33e5b0 < 0a3f4f1f9c27215e4ddcd312558342e57b93e518, >= a8a3e95c74e48c2c9b07b81fafda9122993f2e12, >= 5.18.10 < 5.19, >= 5.19, >= 5.19.1 < 6.1.22, >= 6.2 < 6.2.8, 5.19, 6.3
Fixed versions
5.19, 6.1.22, 6.2.8

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416