CVE-2023-53600

CVE-2023-53600 : In the Linux kernel, a bug in tunnel PMTU handling caused a KASAN slab-out-of-bounds crash when emitting an IPv4 ICMP error in response to a non-linear skb. The root cause was that ip_compute_csum() cannot handle nonlinear skbs, leading to a crash trace including kasan_report and...

CVE-2023-53600: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: tunnels: fix kasan splat when generating ipv4 pmtu error If we try to emit an icmp error in response to a nonliner skb, we get BUG: KASAN: slab-out-of-bounds in ipcomputecsum+0x134/0x220 Read of size 4 at addr ffff88811c50db00 by...