CVE-2023-53199

This is a denial-of-service bug in the HSR handling path: a crafted or malformed HSR frame may corrupt SKB metadata and lead to an skb_under_panic / kernel BUG. It requires the host to be able to deliver HSR frames to the victim (same L2 / bridge/HSR topology). This is not a universal network hole — it only affects systems using the HSR stack/driver (CONFIG_HSR / net/hsr). The bug causes a kernel panic (availability impact) by corrupting skb header/tags and hitting an skb_push()/skb_panic path. There is no indication of arbitrary memory write or control over instruction flow, so remote code execution or reliable memory corruption for privilege escalation is unlikely.

Fixed in Red Hat Enterprise Linux 9.3 (and later versions) and fixed in Red Hat Enterprise Linux 8.9 (and later versions).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent module ath9k_hw from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.