CVE-2023-53839

A data race vulnerability was found in the DCCP (Datagram Congestion Control Protocol) implementation in the Linux kernel. The dp->dccps_mss_cache variable is read in dccp_sendmsg() and do_dccp_getsockopt() without holding the socket lock, while it can be concurrently modified by other threads. This can lead to use of stale or torn values, potentially causing undefined behavior.

This is a data race vulnerability in the DCCP protocol implementation that can lead to undefined behavior. The impact is limited as DCCP is rarely used in production environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the dccp module from being loaded. See https://access.redhat.com/solutions/41278 for instructions on how to blacklist a kernel module.