CVE-2023-53684

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.

This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

Zeroing of structure padding was missing when dumping XFRM algorithms/encap via netlink, allowing leakage of uninitialized kernel bytes to user space. Impact is confidentiality-only and typically requires CAP_NET_ADMIN, so PR is High (PR:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.