CVE-2023-53186

CVE-2023-53186 affects the Linux kernel’s skb handling: a race between coalescing and releasing SKBs can occur when merging fragments across page_pool and non-page_pool pages. The root cause is that skb_cloned(from) must remain true until coalescing finishes; if the other cloned SKB is released m...

SUSE CVE-2022-49093

In the Linux kernel, the following vulnerability has been resolved: skbuff: fix coalescing for pagepool fragment recycling Fix a use-after-free when using pagepool with page fragments. We encountered this problem during normal RX in the hns3 driver: 1 Initially we have three descriptors in the RX...