In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctp_ifwdtsn_skip Currently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference it as struct sctp_ifwdtsn_skip may cause coverflow. This patch fixes it by checking the pos against "the end of the chunk - sizeof(struct sctp_ifwdtsn_skip)" in sctp_ifwdtsn_skip, similar to sctp_fwdtsn_skip.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/32832a2caf82663870126c5186cf8f86c8b2a649 cve-icon cve-icon
https://git.kernel.org/stable/c/4fbd094d4131a10d06a45d64158567052a35b3f4 cve-icon cve-icon
https://git.kernel.org/stable/c/5c9367ac5a22d71841bcd00130f9146c9b227d57 cve-icon cve-icon
https://git.kernel.org/stable/c/6109f5b13ce3e3e537db6f18976ec0e9118d1c6f cve-icon cve-icon
https://git.kernel.org/stable/c/79b28f42214a3d0d6a8c514db3602260bd5d6cb5 cve-icon cve-icon
https://git.kernel.org/stable/c/ad831a7079c99c01e801764b53bc9997c2e9c0f7 cve-icon cve-icon
https://git.kernel.org/stable/c/ad988e9b5ff04607e624a459209e8c2d0c15fc73 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091855-CVE-2023-53372-4d9e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53372 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53372 cve-icon
History

Fri, 19 Sep 2025 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Fri, 19 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Thu, 18 Sep 2025 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctp_ifwdtsn_skip Currently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference it as struct sctp_ifwdtsn_skip may cause coverflow. This patch fixes it by checking the pos against "the end of the chunk - sizeof(struct sctp_ifwdtsn_skip)" in sctp_ifwdtsn_skip, similar to sctp_fwdtsn_skip.
Title sctp: fix a potential overflow in sctp_ifwdtsn_skip
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-18T13:33:19.549Z

Updated: 2025-09-18T13:33:19.549Z

Reserved: 2025-09-17T14:54:09.734Z

Link: CVE-2023-53372

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2025-09-18T14:15:39.750

Modified: 2025-09-18T14:15:39.750

Link: CVE-2023-53372

cve-icon Redhat

Severity : Low

Publid Date: 2025-09-18T00:00:00Z

Links: CVE-2023-53372 - Bugzilla