High severity8.2NVD Advisory· Published Sep 18, 2025· Updated Aug 4, 2026
CVE-2023-53372
CVE-2023-53372
Description
In the Linux kernel, the following vulnerability has been resolved:
sctp: fix a potential overflow in sctp_ifwdtsn_skip
Currently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference it as struct sctp_ifwdtsn_skip may cause coverflow.
This patch fixes it by checking the pos against "the end of the chunk - sizeof(struct sctp_ifwdtsn_skip)" in sctp_ifwdtsn_skip, similar to sctp_fwdtsn_skip.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
10cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=4.16,<4.19.281
- cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.3:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.3:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.3:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.3:rc6:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 4.16
Patches
Vulnerability mechanics
References
7- git.kernel.org/stable/c/32832a2caf82663870126c5186cf8f86c8b2a649nvdPatch
- git.kernel.org/stable/c/4fbd094d4131a10d06a45d64158567052a35b3f4nvdPatch
- git.kernel.org/stable/c/5c9367ac5a22d71841bcd00130f9146c9b227d57nvdPatch
- git.kernel.org/stable/c/6109f5b13ce3e3e537db6f18976ec0e9118d1c6fnvdPatch
- git.kernel.org/stable/c/79b28f42214a3d0d6a8c514db3602260bd5d6cb5nvdPatch
- git.kernel.org/stable/c/ad831a7079c99c01e801764b53bc9997c2e9c0f7nvdPatch
- git.kernel.org/stable/c/ad988e9b5ff04607e624a459209e8c2d0c15fc73nvdPatch
News mentions
0No linked articles in our index yet.