CVE-2023-53825
kernel: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 9, 2025
Updated · June 30, 2026
Description
A memory leak and queue corruption vulnerability was found in the Kernel Connection Multiplexor (KCM) implementation in the Linux kernel. In kcm_sendmsg() for SOCK_DGRAM sockets, when an error occurs during send, the MSG_MORE queue is not properly purged. This leads to memory leaks and corrupted queue state, as subsequent sendmsg() calls resume from the wrong position in the queue.
Statement
This is a memory leak and data corruption issue in the KCM socket implementation affecting datagram mode operations. The impact is limited to systems using KCM sockets with SOCK_DGRAM type.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-390 · Detection of Error Condition Without Action