VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 7, 2025· Updated Jun 17, 2026

CVE-2023-53684

CVE-2023-53684

Description

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.

This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

Affected products

6
  • Linux/Kernelllm-fuzzy5 versions
    (expand)+ 4 more
    • (no CPE)
    • (no CPE)range: 5.11
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.11,<5.15.106
    • cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*
  • osv-coords
    pkg:linux/kernel
    Range: >= 5.11.0, < 5.15.106

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.