SECUFOCUSNOW
Home›CVE index›CVE-2023-53500
Review reviewHigh

CVE-2023-53500

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when the xfrm device sends IPv6 packets. The stack information is as follows: BUG: KASAN: slab-use-after-free in decode_session6+0x103f/0x1890 Read of size 1 at addr ffff8881111458ef by task swapper/3/0 CPU: 3 PID: 0 Comm: swapper/3 Not tainted 6.4.0-next-20230707 #409 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2025.10.01
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: xfrm: fix slab-use-after-free in decode_session6 When the xfrm device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when the xfrm device sends IPv6 packets. The stack information is as follows: BUG: KASAN: slab-use-after-free in decode_session6+0x103f/0x1890 Read of size 1 at addr ffff8881111458ef by task swapper/3/0 CPU: 3 PID: 0 Comm: swapper/3 Not tainted 6.4.0-next-20230707 #409 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= f855691975bb06373a98711e4cfe2c224244b536 < da4cbaa75ed088b6d70db77b9103a27e2359e243, >= f855691975bb06373a98711e4cfe2c224244b536 < db0e50741f0387f388e9ec824ea7ae8456554d5b, >= f855691975bb06373a98711e4cfe2c224244b536 < bafa236380816b41b2c4c6970d9067fefa4a6c9e, >= f855691975bb06373a98711e4cfe2c224244b536 < 44b3d40967009304617a7a6486490c1d6c12f899, >= f855691975bb06373a98711e4cfe2c224244b536 < 0d27567fde5be5f0edc2db5c110142b7915b8fa8, >= f855691975bb06373a98711e4cfe2c224244b536 < 86f15300a22656db3fa8c8967defbcd24fac4d37, >= f855691975bb06373a98711e4cfe2c224244b536 < 53223f2ed1ef5c90dad814daaaefea4e68a933c8, >= 3.19, >= 3.19.1 < 4.19.293, >= 4.20 < 5.4.255, >= 5.5 < 5.10.192, >= 5.11 < 5.15.128, >= 5.16 < 6.1.47, >= 6.2 < 6.4.12, 3.19, 6.5
Fixed versions
4.19.293, 5.4.255, 5.10.192, 5.15.128, 6.1.47, 6.4.12

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-416