CVE-2023-53600

A flaw was found in the Linux kernel in which a checksum calculating function improperly handled nonlinear skbs, resulting in a possible denial of service or disclosure of kernel memory. Because of the challenge of controlling this behavior, the impact of this flaw is limited.

This flaw is rated as Moderate impact because triggering the out-of-bounds memory read requires active IP tunneling deployments and specific packet fragmentation scenarios, limiting arbitrary exploitability. An attacker would need local access or the ability to generate tailored traffic traversing tunnel interfaces (such as VXLAN) that induce path MTU discovery errors. Under typical configurations where network tunneling is not actively handling such non-linear traffic, systems are not exposed to disruption or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.