Security Advisory

CVE-2023-53716

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-22 13:23:49
Last updated 2026-05-23 15:30:33
Assigner Linux
State PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: net: fix skb leak in __skb_tstamp_tx() Commit 50749f2dd685 ("tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.") added a call to skb_orphan_frags_rx() to fix leaks with zerocopy skbs. But it ended up adding a leak of its own. When skb_orphan_frags_rx() fails, the function just returns, leaking the skb it just cloned. Free it before returning. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.