CVE-2023-53684

MEDIUM EPSS 3.2%
Published Oct 7, 20258mo ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Oct 7, 2025 8mo ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space. This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
3.2% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Affected Products 5

VendorProductVersionRange
linuxlinux_kernel*≥5.11  –  <5.15.106
linuxlinux_kernel*≥5.16  –  <6.1.23
linuxlinux_kernel*≥6.2  –  <6.2.10
linuxlinux_kernel6.3any
linuxlinux_kernel6.3any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/0725daaa9a879388ed312110f62dbd5ea2d75f8f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1a351e26cc010d6991fbbd5701ac16581372e26f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5218af4ad5d8948faac19f71583bcd786c3852df
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8222d5910dae08213b6d9d4bc9a7f8502855e624
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0725daaa9a879388ed312110f62dbd5ea2d75f8f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/1a351e26cc010d6991fbbd5701ac16581372e26f
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/5218af4ad5d8948faac19f71583bcd786c3852df
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/8222d5910dae08213b6d9d4bc9a7f8502855e624
    Patch