CVE-2023-52610

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skb leak and crash on ooo frags actct adds skb-users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inetfragreasmprepare skbmorph which is not straightforward. Howev...

CVE-2023-52610

CVE-2023-52610 affects the Linux kernel net/sched: act_ct. The vulnerability stems from skb reference handling during IP defragmentation: act_ct added skb->users before defragmentation, and when fragments arrive out of order no one unreferences the last fragment, causing skb leaks and a potent...