CVE-2023-53716

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/10/2025
Last modified:
22/10/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> net: fix skb leak in __skb_tstamp_tx()<br /> <br /> Commit 50749f2dd685 ("tcp/udp: Fix memleaks of sk and zerocopy skbs with<br /> TX timestamp.") added a call to skb_orphan_frags_rx() to fix leaks with<br /> zerocopy skbs. But it ended up adding a leak of its own. When<br /> skb_orphan_frags_rx() fails, the function just returns, leaking the skb<br /> it just cloned. Free it before returning.<br /> <br /> This bug was discovered and resolved using Coverity Static Analysis<br /> Security Testing (SAST) by Synopsys, Inc.

Impact