CVE-2023-53684 PUBLISHED

xfrm: Zero padding when dumping algos and encap

Assigner: Linux
Reserved: 07.10.2025 Published: 07.10.2025 Updated: 07.10.2025

In the Linux kernel, the following vulnerability has been resolved:

xfrm: Zero padding when dumping algos and encap

When copying data to user-space we should ensure that only valid data is copied over. Padding in structures may be filled with random (possibly sensitve) data and should never be given directly to user-space.

This patch fixes the copying of xfrm algorithms and the encap template in xfrm_user so that padding is zeroed.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 0725daaa9a879388ed312110f62dbd5ea2d75f8f (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 5218af4ad5d8948faac19f71583bcd786c3852df (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 1a351e26cc010d6991fbbd5701ac16581372e26f (excl.)
  • affected from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to 8222d5910dae08213b6d9d4bc9a7f8502855e624 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • unaffected from 5.15.106 to 5.15.* (incl.)
  • unaffected from 6.1.23 to 6.1.* (incl.)
  • unaffected from 6.2.10 to 6.2.* (incl.)
  • unaffected from 6.3 to * (incl.)

References