CVE-2023-53733

In the Linux kernel, the following vulnerability has been resolved:

net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode

When u32_replace_hw_knode fails, we need to undo the tcf_bind_filter operation done at u32_set_parms.

Fix ensures cls_u32 properly unbinds a filter from its class if u32_replace_hw_knode() fails during HW offload. Without the unbind, a dangling bind/reference could persist, leading to inconsistent classifier state, potential reference leaks, or kernel crashes on later updates/removals. Exploitation requires local CAP_NET_ADMIN to manipulate tc u32 rules.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.