CVE-2023-53338

CVE-2023-53338 affects the Linux kernel’s LWT/BPF path. The vulnerability arises from BPF encap ops returning various positive values (e.g., NET_RX_DROP, NET_XMIT_CN, NETDEV_TX_BUSY) from skb_do_redirect and bpf_lwt_xmit_reroute. At the xmit hook these values were implicitly treated as LWTUNNEL_X...

CVE-2023-53338 lwt: Fix return values of BPF xmit ops

In the Linux kernel, the following vulnerability has been resolved: lwt: Fix return values of BPF xmit ops BPF encap ops can return different types of positive values, such like NETRXDROP, NETXMITCN, NETDEVTXBUSY, and so on, from function skbdoredirect and bpflwtxmitreroute. At the xmit hook, suc...