CVE-2023-53432

In the Linux kernel, the following vulnerability has been resolved:

firewire: net: fix use after free in fwnet_finish_incoming_packet()

The netif_rx() function frees the skb so we can't dereference it to save the skb->len.

A use-after-free in the FireWire network driver occurred because fwnet_finish_incoming_packet() accessed skb->len after handing the skb to netif_rx(), which may free it. An attacker on the same IEEE-1394 bus can trigger this via normal packet reception, typically resulting in a kernel crash (DoS). Impact is limited to systems with FireWire networking enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.