CVE Database›Document archive›CVE-2023-53825

CVE-2023-53825

kernel: kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg()

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 9, 2025

Updated · June 30, 2026

Description

A memory leak and queue corruption vulnerability was found in the Kernel Connection Multiplexor (KCM) implementation in the Linux kernel. In kcm_sendmsg() for SOCK_DGRAM sockets, when an error occurs during send, the MSG_MORE queue is not properly purged. This leads to memory leaks and corrupted queue state, as subsequent sendmsg() calls resume from the wrong position in the queue.

Statement

This is a memory leak and data corruption issue in the KCM socket implementation affecting datagram mode operations. The impact is limited to systems using KCM sockets with SOCK_DGRAM type.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-390 · Detection of Error Condition Without Action