GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53559 (GCVE-0-2023-53559)

Vulnerability from cvelistv5 – Published: 2025-10-04 15:17 – Updated: 2026-08-05 09:14
VLAI
Title
ip_vti: fix potential slab-use-after-free in decode_session6
Summary
In the Linux kernel, the following vulnerability has been resolved: ip_vti: fix potential slab-use-after-free in decode_session6 When ip_vti device is set to the qdisc of the sfb type, the cb field of the sent skb may be modified during enqueuing. Then, slab-use-after-free may occur when ip_vti device sends IPv6 packets. As commit f855691975bb ("xfrm6: Fix the nexthdr offset in _decode_session6.") showed, xfrm_decode_session was originally intended only for the receive path. IP6CB(skb)->nhoff is not set during transmission. Therefore, set the cb field in the skb to 0 before sending packets.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f855691975bb06373a98711e4cfe2c224244b536 , < 82fb41c5de243e7dfa90f32ca58e35adaff56c1d (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < 7dfe23659f3677c08a60a0056cda2d91a79c15ca (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < d34c30442d5e53a33cde79ca163320dbe2432cbd (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < 0b4d69539fdea138af2befe08893850c89248068 (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < e1e04cc2ef2c0c0866c19f5627149a76c2baae32 (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < 2b05bf5dc437f7891dd409a3eaf5058459391c7a (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < 78e397a43e1c47321a4679cc49a6c4530bf820b9 (git)
Affected: f855691975bb06373a98711e4cfe2c224244b536 , < 6018a266279b1a75143c7c0804dd08a5fc4c3e0b (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.19
Unaffected: 0 , < 3.19 (semver)
Unaffected: 4.14.324 , ≤ 4.14.* (semver)
Unaffected: 4.19.293 , ≤ 4.19.* (semver)
Unaffected: 5.4.255 , ≤ 5.4.* (semver)
Unaffected: 5.10.192 , ≤ 5.10.* (semver)
Unaffected: 5.15.128 , ≤ 5.15.* (semver)
Unaffected: 6.1.47 , ≤ 6.1.* (semver)
Unaffected: 6.4.12 , ≤ 6.4.* (semver)
Unaffected: 6.5 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/ip_vti.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "82fb41c5de243e7dfa90f32ca58e35adaff56c1d",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "7dfe23659f3677c08a60a0056cda2d91a79c15ca",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "d34c30442d5e53a33cde79ca163320dbe2432cbd",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "0b4d69539fdea138af2befe08893850c89248068",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "e1e04cc2ef2c0c0866c19f5627149a76c2baae32",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "2b05bf5dc437f7891dd409a3eaf5058459391c7a",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "78e397a43e1c47321a4679cc49a6c4530bf820b9",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            },
            {
              "lessThan": "6018a266279b1a75143c7c0804dd08a5fc4c3e0b",
              "status": "affected",
              "version": "f855691975bb06373a98711e4cfe2c224244b536",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/ip_vti.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.19"
            },
            {
              "lessThan": "3.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.324",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.293",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.255",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.192",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.128",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.47",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.4.*",
              "status": "unaffected",
              "version": "6.4.12",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.5",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.324",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.293",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.255",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.192",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.128",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.47",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4.12",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.5",
                  "versionStartIncluding": "3.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nip_vti: fix potential slab-use-after-free in decode_session6\n\nWhen ip_vti device is set to the qdisc of the sfb type, the cb field\nof the sent skb may be modified during enqueuing. Then,\nslab-use-after-free may occur when ip_vti device sends IPv6 packets.\nAs commit f855691975bb (\"xfrm6: Fix the nexthdr offset in\n_decode_session6.\") showed, xfrm_decode_session was originally intended\nonly for the receive path. IP6CB(skb)-\u003enhoff is not set during\ntransmission. Therefore, set the cb field in the skb to 0 before\nsending packets."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Triggering requires a locally configured ip_vti device with an sfb qdisc attached and packets routed out of it, all of which is set up and driven through local netlink/rtnetlink and a local socket. Although forwarded traffic from a remote peer would also hit vti_tunnel_xmit on a router so configured, the vulnerable state depends entirely on local device/qdisc configuration, so Local is the defensible vector.\nAC:L - The attacker creates every precondition: the vti device, the sfb qdisc, and its rehash_interval/warmup_time tunables that control when q-\u003eslot flips and hashes[1] is populated with a siphash value overlapping IP6CB-\u003enhoff. Once slot==1 every transmitted IPv6 packet performs the wild nh[nhoff] read, making the trigger deterministic and repeatable.\nPR:L - Creating the vti tunnel and attaching the sfb qdisc requires CAP_NET_ADMIN, but ip_vti is fully network-namespace aware (register_pernet_device with a per-netns ip_vti0 fallback), so an unprivileged user obtains the needed capability with unshare -Urn. Per kernel scoring guidance, CAP_NET_ADMIN reachable through user namespaces is Low, not High.\nUI:N - The attacker performs the entire sequence \u2014 configure the device and qdisc, add a route, send an IPv6 packet \u2014 with no action by any other user or administrator.\nS:U - The out-of-bounds access occurs in kernel heap memory and its consequences remain within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - decode_session6() reads a byte from freed or adjacent slab memory at an offset up to 64KB beyond the network header \u2014 an unbounded use-after-free read rather than a small bounded one \u2014 and that value steers the protocol state machine and xfrm flow key, providing an oracle on kernel heap contents.\nI:H - The kernel\u0027s IPsec flow decode (flowi6_proto, ports, and the ensuing ip6_route_output/xfrm_lookup_route policy selection) is driven by data read out of freed heap memory, so a security-relevant kernel decision is made on corrupted state; consistent with treating slab-use-after-free as a high integrity impact.\nA:H - The wild read dereferences an address up to 65535 bytes past the skb data allocation, which faults on unmapped memory or memory holes and reliably produces a KASAN slab-use-after-free splat and kernel oops. The attacker can repeat it on every transmitted packet, so it is a sustained crash/DoS."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:14:50.051Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/82fb41c5de243e7dfa90f32ca58e35adaff56c1d"
        },
        {
          "url": "https://git.kernel.org/stable/c/7dfe23659f3677c08a60a0056cda2d91a79c15ca"
        },
        {
          "url": "https://git.kernel.org/stable/c/d34c30442d5e53a33cde79ca163320dbe2432cbd"
        },
        {
          "url": "https://git.kernel.org/stable/c/0b4d69539fdea138af2befe08893850c89248068"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1e04cc2ef2c0c0866c19f5627149a76c2baae32"
        },
        {
          "url": "https://git.kernel.org/stable/c/2b05bf5dc437f7891dd409a3eaf5058459391c7a"
        },
        {
          "url": "https://git.kernel.org/stable/c/78e397a43e1c47321a4679cc49a6c4530bf820b9"
        },
        {
          "url": "https://git.kernel.org/stable/c/6018a266279b1a75143c7c0804dd08a5fc4c3e0b"
        }
      ],
      "title": "ip_vti: fix potential slab-use-after-free in decode_session6",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53559",
    "datePublished": "2025-10-04T15:17:03.497Z",
    "dateReserved": "2025-10-04T15:14:15.923Z",
    "dateUpdated": "2026-08-05T09:14:50.051Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53559",
      "date": "2026-09-16",
      "epss": "0.00149",
      "percentile": "0.04464"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53559\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-10-04T16:15:51.280\",\"lastModified\":\"2026-08-04T10:19:12.287\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nip_vti: fix potential slab-use-after-free in decode_session6\\n\\nWhen ip_vti device is set to the qdisc of the sfb type, the cb field\\nof the sent skb may be modified during enqueuing. Then,\\nslab-use-after-free may occur when ip_vti device sends IPv6 packets.\\nAs commit f855691975bb (\\\"xfrm6: Fix the nexthdr offset in\\n_decode_session6.\\\") showed, xfrm_decode_session was originally intended\\nonly for the receive path. IP6CB(skb)-\u003enhoff is not set during\\ntransmission. Therefore, set the cb field in the skb to 0 before\\nsending packets.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv4/ip_vti.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"82fb41c5de243e7dfa90f32ca58e35adaff56c1d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"7dfe23659f3677c08a60a0056cda2d91a79c15ca\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"d34c30442d5e53a33cde79ca163320dbe2432cbd\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"0b4d69539fdea138af2befe08893850c89248068\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"e1e04cc2ef2c0c0866c19f5627149a76c2baae32\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"2b05bf5dc437f7891dd409a3eaf5058459391c7a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"78e397a43e1c47321a4679cc49a6c4530bf820b9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f855691975bb06373a98711e4cfe2c224244b536\",\"lessThan\":\"6018a266279b1a75143c7c0804dd08a5fc4c3e0b\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv4/ip_vti.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.19\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.19\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.324\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.293\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.255\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.192\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.128\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.47\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4.12\",\"lessThanOrEqual\":\"6.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-416\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.19.1\",\"versionEndExcluding\":\"4.14.324\",\"matchCriteriaId\":\"4371BCA6-0BDB-46C3-8352-15702F5E81A2\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.15\",\"versionEndExcluding\":\"4.19.293\",\"matchCriteriaId\":\"39603052-E341-4096-8535-38D44A60E845\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20\",\"versionEndExcluding\":\"5.4.255\",\"matchCriteriaId\":\"1379E40A-2AC3-484E-929A-7F46B6C3B521\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.192\",\"matchCriteriaId\":\"9396FFDC-6A0D-44B7-9368-21B456F6D4AE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.128\",\"matchCriteriaId\":\"1415629F-F97B-4880-BA1E-AF3DBB8EF305\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.47\",\"matchCriteriaId\":\"2EEA01B0-0151-4E0F-B140-1A441EEDD717\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.4.12\",\"matchCriteriaId\":\"CF8ECF64-40AE-49AB-8315-4D83F9F56ECF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.19:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"8C54596F-5461-44C4-91FB-7453BE905748\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:3.19:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"5843CB48-122D-496D-B66D-35296BC0EFB1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B3E6E4D-E24E-4630-B00C-8C9901C597B0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"E4A01A71-0F09-4DB2-A02F-7EFFBE27C98D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*\",\"matchCriteriaId\":\"F5608371-157A-4318-8A2E-4104C3467EA1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"2226A776-DF8C-49E0-A030-0A7853BB018A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"6F15C659-DF06-455A-9765-0E6DE920F29A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.5:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"5B1C14ED-ABC4-41D3-8D9C-D38C6A65B4DE\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/0b4d69539fdea138af2befe08893850c89248068\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/2b05bf5dc437f7891dd409a3eaf5058459391c7a\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/6018a266279b1a75143c7c0804dd08a5fc4c3e0b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/78e397a43e1c47321a4679cc49a6c4530bf820b9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/7dfe23659f3677c08a60a0056cda2d91a79c15ca\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/82fb41c5de243e7dfa90f32ca58e35adaff56c1d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/d34c30442d5e53a33cde79ca163320dbe2432cbd\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e1e04cc2ef2c0c0866c19f5627149a76c2baae32\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-05T03:41:05+00:00",
      "cve": "CVE-2023-53559",
      "id": "CVE-2023-53559",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:fixed": "399",
      "product_status:known_affected": "38",
      "product_status:known_not_affected": "118",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ip_vti: fix potential slab-use-after-free in decode_session6",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53559.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-11T02:20:25Z",
      "cve": "CVE-2023-53559",
      "id": "CVE-2023-53559",
      "initial_release_date": "2025-10-05T02:56:19Z",
      "product_status:known_affected": "501",
      "product_status:known_not_affected": "26",
      "product_status:recommended": "667",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53559",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53559.json",
      "version": "55"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.