8.2

CVE-2023-53372: sctp: fix a potential overflow in sctp_ifwdtsn_skip

Modified
AliasesUBUNTU-CVE-2023-53372DEBIAN-CVE-2023-53372
Published 18-09-2025Last modified 05-08-2026

Vulnerability summary

CVE-2023-53372 is a high (CVSS 8.2) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 32.6% of scored vulnerabilities.

Priority
Prioritisesevere

Severe, CVSS 8.2 (CVE.org); no exploitation reported by the 5 checked sources; EPSS 0% (FIRST, 03-11-2026)

Source freshness unavailable

How is this decided?
CVSS score
8.2/10
010
High · v3.1 (CVE.org)
EPSS score
0.39%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 5
RHSA-2023:6583RHSA-2023:7077RHSA-2024:0575RHSA-2026:25533RHSA-2026:26535

Timeline

  1. 18-09-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: fix a potential overflow in sctp_ifwdtsn_skip Currently, when traversing ifwdtsn skips with _sctp_walk_ifwdtsn, it only checks the pos against the end of the chunk. However, the data left for the last pos may be < sizeof(struct sctp_ifwdtsn_skip), and dereference it as struct sctp_ifwdtsn_skip may cause coverflow. This patch fixes it by checking the pos against "the end of the chunk - sizeof(struct sctp_ifwdtsn_skip)" in sctp_ifwdtsn_skip, similar to sctp_fwdtsn_skip.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.39%

Chance of exploitation in the next 30 days

Percentile

33%

Versus all other CVEs

30-day change

Increase +0.01 pp

From 0.38% on 04-10-2026

04-10-202603-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Version check

Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu119 products
  • linux< 5.4.0-156.173 | < 5.15.0-79.86
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1107.115 | < 5.15.0-1042.47
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < 4fbd094d4131a10d06a45d64158567052a35b3f4 | ≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < ad831a7079c99c01e801764b53bc9997c2e9c0f7 | ≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < 79b28f42214a3d0d6a8c514db3602260bd5d6cb5 | ≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < 6109f5b13ce3e3e537db6f18976ec0e9118d1c6f | ≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < 5c9367ac5a22d71841bcd00130f9146c9b227d57 | ≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < ad988e9b5ff04607e624a459209e8c2d0c15fc73 | ≥ 0fc2ea922c8ad5520c80f03facbf396c81dce802, < 32832a2caf82663870126c5186cf8f86c8b2a649 | 4.16
  • linux_kernel≥ 4.16, < 4.19.281 | ≥ 4.20, < 5.4.241 | ≥ 5.5, < 5.10.178 | ≥ 5.11, < 5.15.108 | ≥ 5.16, < 6.1.25 | ≥ 6.2, < 6.2.12 | 6.3:rc1 | 6.3:rc2 | 6.3:rc3 | 6.3:rc4 | 6.3:rc5 | 6.3:rc6
Debian1 product
  • linux< 6.1.25-1

3 vendors · 122 products

References

11 links
Show all 11 references