目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

CVE-2023-53109— Linux kernel 安全漏洞

AI 预测 5.5 利用难度: 中等 EPSS 0.18% · P7

影响版本矩阵 18

厂商产品版本范围状态
LinuxLinux8eb30be0352d09165e94a41fef1c7b994dca0714< 8e206f66d824b3b28a7f9ee1366dfc79a937bb46affected
8eb30be0352d09165e94a41fef1c7b994dca0714< 51f3bd3765bc5ca4583af07a00833da00d2ace1daffected
8eb30be0352d09165e94a41fef1c7b994dca0714< 5aaab217c8f5387b9c5fff9e940d80f135e04366affected
8eb30be0352d09165e94a41fef1c7b994dca0714< be59b87ee4aed81db7c10e44f603866a0ac3ca5daffected
8eb30be0352d09165e94a41fef1c7b994dca0714< e0a557fc1daf5c1086e47150a4571aebadbb62beaffected
8eb30be0352d09165e94a41fef1c7b994dca0714< a69b72b57b7d269e833e520ba7500d556e8189b6affected
8eb30be0352d09165e94a41fef1c7b994dca0714< 9b86a8702b042ee4e15d2d46375be873a6a8834faffected
8eb30be0352d09165e94a41fef1c7b994dca0714< 4b397c06cb987935b1b097336532aa6b4210e091affected
… +10 条更多
获取后续新漏洞提醒登录后订阅

一、 漏洞 CVE-2023-53109 基础信息

漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
net: tunnels: annotate lockless accesses to dev->needed_headroom
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: net: tunnels: annotate lockless accesses to dev->needed_headroom IP tunnels can apparently update dev->needed_headroom in their xmit path. This patch takes care of three tunnels xmit, and also the core LL_RESERVED_SPACE() and LL_RESERVED_SPACE_EXTRA() helpers. More changes might be needed for completeness. BUG: KCSAN: data-race in ip_tunnel_xmit / ip_tunnel_xmit read to 0xffff88815b9da0ec of 2 bytes by task 888 on cpu 1: ip_tunnel_xmit+0x1270/0x1730 net/ipv4/ip_tunnel.c:803 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4881 [inline] netdev_start_xmit include/linux/netdevice.h:4895 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596 __dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246 dev_queue_xmit include/linux/netdevice.h:3051 [inline] neigh_direct_output+0x17/0x20 net/core/neighbour.c:1623 neigh_output include/net/neighbour.h:546 [inline] ip_finish_output2+0x740/0x840 net/ipv4/ip_output.c:228 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:430 dst_output include/net/dst.h:444 [inline] ip_local_out+0x64/0x80 net/ipv4/ip_output.c:126 iptunnel_xmit+0x34a/0x4b0 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1451/0x1730 net/ipv4/ip_tunnel.c:813 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4881 [inline] netdev_start_xmit include/linux/netdevice.h:4895 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596 __dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246 dev_queue_xmit include/linux/netdevice.h:3051 [inline] neigh_direct_output+0x17/0x20 net/core/neighbour.c:1623 neigh_output include/net/neighbour.h:546 [inline] ip_finish_output2+0x740/0x840 net/ipv4/ip_output.c:228 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:430 dst_output include/net/dst.h:444 [inline] ip_local_out+0x64/0x80 net/ipv4/ip_output.c:126 iptunnel_xmit+0x34a/0x4b0 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1451/0x1730 net/ipv4/ip_tunnel.c:813 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4881 [inline] netdev_start_xmit include/linux/netdevice.h:4895 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596 __dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246 dev_queue_xmit include/linux/netdevice.h:3051 [inline] neigh_direct_output+0x17/0x20 net/core/neighbour.c:1623 neigh_output include/net/neighbour.h:546 [inline] ip_finish_output2+0x740/0x840 net/ipv4/ip_output.c:228 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip_output+0xe5/0x1b0 net/ipv4/ip_output.c:430 dst_output include/net/dst.h:444 [inline] ip_local_out+0x64/0x80 net/ipv4/ip_output.c:126 iptunnel_xmit+0x34a/0x4b0 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1451/0x1730 net/ipv4/ip_tunnel.c:813 __gre_xmit net/ipv4/ip_gre.c:469 [inline] ipgre_xmit+0x516/0x570 net/ipv4/ip_gre.c:661 __netdev_start_xmit include/linux/netdevice.h:4881 [inline] netdev_start_xmit include/linux/netdevice.h:4895 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_start_xmit+0x127/0x400 net/core/dev.c:3596 __dev_queue_xmit+0x1007/0x1eb0 net/core/dev.c:4246 dev_queue_xmit include/linux/netdevice.h:3051 [inline] neigh_direct_output+0x17/0x20 net/core/neighbour.c:1623 neigh_output include/net/neighbour.h:546 [inline] ip_finish_output2+0x740/0x840 net/ipv4/ip_output.c:228 ip_finish_output+0xf4/0x240 net/ipv4/ip_output.c:316 NF_HOOK_COND include/linux/netfilter.h:291 [inline] ip_output+0xe5/0x1b0 net/i ---truncated---
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于隧道设备对dev->needed_headroom的无锁访问存在数据竞争。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD

受影响产品

厂商产品影响版本CPE订阅
LinuxLinux 8eb30be0352d09165e94a41fef1c7b994dca0714 ~ 8e206f66d824b3b28a7f9ee1366dfc79a937bb46 -
LinuxLinux 4.7 -

二、漏洞 CVE-2023-53109 的公开POC

#POC 描述源链接神龙链接
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC

三、漏洞 CVE-2023-53109 的情报信息

请登录查看更多情报信息。

CVE-2023-53109 补丁与修复 (7)

CVE-2023-53109 其他参考 (1)

同批安全公告 · Linux · 2025-05-02 · 共 107 条

CVE-2025-377987.8 HIGHLinux kernel 安全漏洞
CVE-2025-377977.8 HIGHLinux kernel 安全漏洞
CVE-2023-53114Linux kernel 安全漏洞
CVE-2023-53088Linux kernel 安全漏洞
CVE-2023-53112Linux kernel 安全漏洞
CVE-2023-53113Linux kernel 安全漏洞
CVE-2023-53111Linux kernel 安全漏洞
CVE-2023-53110Linux kernel 安全漏洞
CVE-2023-53108Linux kernel 安全漏洞
CVE-2023-53106Linux kernel 安全漏洞
CVE-2023-53107Linux kernel 安全漏洞
CVE-2023-53105Linux kernel 安全漏洞
CVE-2023-53103Linux kernel 安全漏洞
CVE-2023-53101Linux kernel 安全漏洞
CVE-2023-53102Linux kernel 安全漏洞
CVE-2023-53090Linux kernel 安全漏洞
CVE-2023-53092Linux kernel 安全漏洞
CVE-2023-53093Linux kernel 安全漏洞
CVE-2023-53091Linux kernel 安全漏洞
CVE-2023-53094Linux kernel 安全漏洞

显示前 20 条，共 107 条。 查看全部 &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53109

暂无评论

发表评论