VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 7, 2025· Updated Nov 5, 2026

CVE-2023-53684

CVE-2023-53684

Description

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.

This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Linux/Kernel5 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.11,<5.15.106
    • cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 5.11
  • osv-coords
    pkg:linux/kernel
    Range: >= 5.11.0, < 5.15.106

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.