Use-After-Free Vulnerability in Linux Kernel MPTCP Implementation
Summary
CVE-2023-53072: In the Linux kernel, the following vulnerability has been resolved: mptcp: use the workqueue to destroy unaccepted sockets Christoph reported a UaF at token lookup time after having refactored the passive socket initiali... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core of many operating systems, providing essential services for hardware and software interactions. It supports various functionalities, including process management, memory management, and networking. The MPTCP (Multipath TCP) implementation allows for the use of multiple paths for TCP connections, enhancing performance and reliability. However, a recent vulnerability has been identified in the MPTCP implementation, which could lead to severe security issues if exploited.
Vulnerability Detail
The vulnerability, identified as CVE-2023-53072, is a use-after-free (UaF) issue that occurs during the token lookup process in the MPTCP implementation of the Linux kernel. This flaw arises from improper management of socket resources, specifically when unaccepted sockets are destroyed. An attacker could exploit this vulnerability to read freed memory, potentially leading to arbitrary code execution or system crashes. The vulnerability was reported by Christoph and is associated with a specific call trace that reveals the sequence of operations leading to the UaF condition.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it becomes available for your distribution.
Conclusion
CVE-2023-53072 represents a significant security vulnerability in the Linux kernel's MPTCP implementation. Users are urged to update their systems to the patched version to protect against potential exploits. Utilizing tools like Vulert can aid in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
CVE-2023-53072 is a use-after-free vulnerability in the MPTCP implementation of the Linux kernel, which can lead to security risks if exploited.
You can use Vulert, which monitors open-source vulnerabilities in your software. By uploading your manifest file, such as package-lock.json, you can check for vulnerabilities without needing to install any software.
Exploitation of this vulnerability could lead to arbitrary code execution, system crashes, or unauthorized access to sensitive information.
Yes, a patch is available for Debian 12 and Debian 13 in version 6.1.25-1. Users of Debian 11 should monitor for future updates.
While there are no specific workarounds, it is crucial to apply the patch as soon as possible to mitigate the risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
