CVE-2023-53836

A use-after-free vulnerability was found in the BPF sockmap implementation in the Linux kernel. A race condition exists between the sk_psock_backlog processing and userspace consumption of socket buffers. When userspace calls recvmsg() and consumes an skb, it can free the buffer via consume_skb() while the backlog worker still holds a reference to it through the ingress_skb queue. This leads to a use-after-free when skb_dequeue() is subsequently called.

This is a use-after-free vulnerability in the BPF sockmap subsystem that can cause kernel crashes. The vulnerability requires the use of BPF sockmap programs and specific socket configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.