CVE-2023-53684

MEDIUM

Linux Kernel 5.11-5.15.106 - Information Disclosure via Uninitialized Padding in xfrm Algorithms and Encap Template

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: Zero padding when dumping algos and encap When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space. This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

References (4)

Core 4

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 3.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published
Products (15)
linux/Kernel 5.11.0 - 5.15.106linux
linux/Kernel 5.16.0 - 6.1.23linux
linux/Kernel 6.2.0 - 6.2.10linux
Linux/Linux < 5.11
Linux/Linux 5.11
Linux/Linux 5.15.106 - 5.15.*
Linux/Linux 6.1.23 - 6.1.*
Linux/Linux 6.2.10 - 6.2.*
Linux/Linux 6.3
Linux/Linux c7a5899eb26e2a4d516d53f65b6dd67be2228041 - 0725daaa9a879388ed312110f62dbd5ea2d75f8f
... and 5 more
Published Oct 07, 2025
Tracked Since Feb 18, 2026