CVE-2023-53684
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
07/10/2025
Last modified:
08/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
xfrm: Zero padding when dumping algos and encap<br />
<br />
When copying data to user-space we should ensure that only valid<br />
data is copied over. Padding in structures may be filled with<br />
random (possibly sensitve) data and should never be given directly<br />
to user-space.<br />
<br />
This patch fixes the copying of xfrm algorithms and the encap<br />
template in xfrm_user so that padding is zeroed.



