CVE-2023-52610

In the Linux kernel, the following vulnerability has been resolved: net/sched: actct: fix skb leak and crash on ooo frags actct adds skb-users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inetfragreasmprepare skbmorph which is not straightforward. Howev...

CVE-2023-52610

CVE-2023-52610 is a Linux kernel vulnerability in the net/sched: act_ct path. The issue arises when defragmenting fragments (ooo frag) where skb references are mishandled, leaking skb buffers and potentially crashing the kernel when skb is cloned/shared. The root cause is the previous use of skb_...