CVE-2023-53072

Source
https://nvd.nist.gov/vuln/detail/CVE-2023-53072
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53072.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53072
Downstream
Published
2025-05-02T15:55:23Z
Modified
2025-10-15T05:53:49.012526Z
Summary
mptcp: use the workqueue to destroy unaccepted sockets
Details

In the Linux kernel, the following vulnerability has been resolved:

mptcp: use the workqueue to destroy unaccepted sockets

Christoph reported a UaF at token lookup time after having refactored the passive socket initialization part:

BUG: KASAN: use-after-free in _tokenbucket_busy+0x253/0x260 Read of size 4 at addr ffff88810698d5b0 by task syz-executor653/3198

CPU: 1 PID: 3198 Comm: syz-executor653 Not tainted 6.2.0-rc59af4eaa31c1f6c00c8f1e448ed99a45c66340dd5 #6 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Call Trace: <TASK> dumpstacklvl+0x6e/0x91 printreport+0x16a/0x46f kasanreport+0xad/0x130 _tokenbucketbusy+0x253/0x260 mptcptokennewconnect+0x13d/0x490 mptcpconnect+0x4ed/0x860 _inetstreamconnect+0x80e/0xd90 tcpsendmsgfastopen+0x3ce/0x710 mptcpsendmsg+0xff1/0x1a20 inetsendmsg+0x11d/0x140 _syssendto+0x405/0x490 _x64syssendto+0xdc/0x1b0 dosyscall64+0x3b/0x90 entrySYSCALL64after_hwframe+0x72/0xdc

We need to properly clean-up all the paired MPTCP-level resources and be sure to release the msk last, even when the unaccepted subflow is destroyed by the TCP internals via inetchildforget().

We can re-use the existing MPTCPWORKCLOSE_SUBFLOW infra, explicitly checking that for the critical scenario: the closed subflow is the MPC one, the msk is not accepted and eventually going through full cleanup.

With such change, _mptcpdestroy_sock() is always called on msk sockets, even on accepted ones. We don't need anymore to transiently drop one sk reference at msk clone time.

Please note this commit depends on the parent one:

mptcp: refactor passive socket initialization

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
58b09919626bf9067345289212ec030c61eb1034
Fixed
2827f099b3fb9a59263c997400e9182f5d423e84
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
58b09919626bf9067345289212ec030c61eb1034
Fixed
804cf487fb0031f3c74755b78d8663333f0ba636
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
58b09919626bf9067345289212ec030c61eb1034
Fixed
b6985b9b82954caa53f862d6059d06c0526254f0

Affected versions

v5.*

v5.10
v5.10-rc1
v5.10-rc2
v5.10-rc3
v5.10-rc4
v5.10-rc5
v5.10-rc6
v5.10-rc7
v5.11
v5.11-rc1
v5.11-rc2
v5.11-rc3
v5.11-rc4
v5.11-rc5
v5.11-rc6
v5.11-rc7
v5.12
v5.12-rc1
v5.12-rc1-dontuse
v5.12-rc2
v5.12-rc3
v5.12-rc4
v5.12-rc5
v5.12-rc6
v5.12-rc7
v5.12-rc8
v5.13
v5.13-rc1
v5.13-rc2
v5.13-rc3
v5.13-rc4
v5.13-rc5
v5.13-rc6
v5.13-rc7
v5.14
v5.14-rc1
v5.14-rc2
v5.14-rc3
v5.14-rc4
v5.14-rc5
v5.14-rc6
v5.14-rc7
v5.15
v5.15-rc1
v5.15-rc2
v5.15-rc3
v5.15-rc4
v5.15-rc5
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8
v5.6
v5.6-rc6
v5.6-rc7
v5.7
v5.7-rc1
v5.7-rc2
v5.7-rc3
v5.7-rc4
v5.7-rc5
v5.7-rc6
v5.7-rc7
v5.8
v5.8-rc1
v5.8-rc2
v5.8-rc3
v5.8-rc4
v5.8-rc5
v5.8-rc6
v5.8-rc7
v5.9
v5.9-rc1
v5.9-rc2
v5.9-rc3
v5.9-rc4
v5.9-rc5
v5.9-rc6
v5.9-rc7
v5.9-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.3
v6.1.4
v6.1.5
v6.1.6
v6.1.7
v6.1.8
v6.1.9
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.2.1
v6.2.2
v6.2.3
v6.2.4
v6.2.5
v6.2.6
v6.2.7
v6.3-rc1

Database specific

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 668.0,
                "function_hash": "222152443123641916866941194579601703471"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_stream_accept"
            },
            "id": "CVE-2023-53072-0704ca0a",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 300.0,
                "function_hash": "123858723609041884704904267393243380358"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "subflow_ulp_release"
            },
            "id": "CVE-2023-53072-0a1eda97",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 986.0,
                "function_hash": "208412306385774386721029701368803907108"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_sk_clone"
            },
            "id": "CVE-2023-53072-0b3b00d0",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 871.0,
                "function_hash": "134933763249515982289526922239584185747"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_accept"
            },
            "id": "CVE-2023-53072-209f1b83",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1112.0,
                "function_hash": "212223500279820455801205431217558184815"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "mptcp_subflow_queue_clean"
            },
            "id": "CVE-2023-53072-24eea2f5",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1164.0,
                "function_hash": "286717979052638997391807830732703119462"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "__mptcp_close_ssk"
            },
            "id": "CVE-2023-53072-37a54850",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 97.0,
                "function_hash": "223455583428580156140479322207281783133"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "mptcp_force_close"
            },
            "id": "CVE-2023-53072-3865ac89",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 614.0,
                "function_hash": "84068533154048987495287555107774579112"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_stream_accept"
            },
            "id": "CVE-2023-53072-3f646347",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "274457165662248887514430509416093930973",
                    "317035022360957890817703959335476268692",
                    "172284990896194208333877263696130754856",
                    "223532525972969744727184055025324490876",
                    "178110967252507030939735323918273800031",
                    "283105023352395590152171005953740700346",
                    "179910966967349707897008895470671729059"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.h"
            },
            "id": "CVE-2023-53072-4745d840",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 668.0,
                "function_hash": "222152443123641916866941194579601703471"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_stream_accept"
            },
            "id": "CVE-2023-53072-4ac97a3a",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 319.0,
                "function_hash": "233877238054178256167256899962858876868"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "__mptcp_close_subflow"
            },
            "id": "CVE-2023-53072-50cde4af",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 300.0,
                "function_hash": "123858723609041884704904267393243380358"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "subflow_ulp_release"
            },
            "id": "CVE-2023-53072-51542baa",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1245.0,
                "function_hash": "244579509250972189720366841232179794261"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_sk_clone"
            },
            "id": "CVE-2023-53072-52453e4c",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 97.0,
                "function_hash": "223455583428580156140479322207281783133"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "mptcp_force_close"
            },
            "id": "CVE-2023-53072-54d1d86b",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 970.0,
                "function_hash": "272147243849138681085683252970360943938"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_worker"
            },
            "id": "CVE-2023-53072-658057cf",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 871.0,
                "function_hash": "134933763249515982289526922239584185747"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_accept"
            },
            "id": "CVE-2023-53072-7a6b9b6e",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 319.0,
                "function_hash": "233877238054178256167256899962858876868"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "__mptcp_close_subflow"
            },
            "id": "CVE-2023-53072-7b6ee264",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "318928469435359180078972111504091807056",
                    "135923664133972219779249520591818678367",
                    "64902104690528048051213181708295751202",
                    "335961032660293730602888026300126704472",
                    "64130839395838038656011824157960619291",
                    "19092842548998144079684567350269930836",
                    "134077836412840932676487375247354387865",
                    "124554421362113451902580562110177193045",
                    "171652386145591613155267006775047628711",
                    "136431589385061451952122350449034544855",
                    "67890667323464490359781597388731818353",
                    "86301041963458246388562338470160970260",
                    "40443573831643873853713601425585346689",
                    "302945361071942508229543244408412313037",
                    "12211008414623561692657186369035267829",
                    "45898130330341640044487851151369908176",
                    "112933545374108745574408947764930697176",
                    "334695479221412988193849208792775626347",
                    "319301863081343702949929848755655292660",
                    "302538740130951208058148273443076947945",
                    "45904712620603792277121668229894324243",
                    "28016734664882478059870493171699332995",
                    "318195119715342512053974590179068574260",
                    "20189902046219581987469166700692883095",
                    "36955324133292825724012946456963542264"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/subflow.c"
            },
            "id": "CVE-2023-53072-822dcf93",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1113.0,
                "function_hash": "179724381451202972339609087437062349206"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "__mptcp_close_ssk"
            },
            "id": "CVE-2023-53072-828163dd",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "318928469435359180078972111504091807056",
                    "135923664133972219779249520591818678367",
                    "64902104690528048051213181708295751202",
                    "335961032660293730602888026300126704472",
                    "64130839395838038656011824157960619291",
                    "19092842548998144079684567350269930836",
                    "134077836412840932676487375247354387865",
                    "124554421362113451902580562110177193045",
                    "171652386145591613155267006775047628711",
                    "136431589385061451952122350449034544855",
                    "67890667323464490359781597388731818353",
                    "86301041963458246388562338470160970260",
                    "40443573831643873853713601425585346689",
                    "302945361071942508229543244408412313037",
                    "12211008414623561692657186369035267829",
                    "45898130330341640044487851151369908176",
                    "112933545374108745574408947764930697176",
                    "334695479221412988193849208792775626347",
                    "319301863081343702949929848755655292660",
                    "302538740130951208058148273443076947945",
                    "45904712620603792277121668229894324243",
                    "28016734664882478059870493171699332995",
                    "318195119715342512053974590179068574260",
                    "20189902046219581987469166700692883095",
                    "36955324133292825724012946456963542264"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/subflow.c"
            },
            "id": "CVE-2023-53072-88d4fedb",
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "232339187447269343920725892647320671725",
                    "140400038831176470260778451987131314466",
                    "15278363874831092745318850845670588623",
                    "170208051555680453301016410355993210354",
                    "44131465295695709796951099458540262428",
                    "130288033192254087241763224985370004400",
                    "218441347602215443316191214916374076125",
                    "286804539105659525808085677975103987675",
                    "169444894075076273011382829912498372474",
                    "129470895407329308050969002416368640731",
                    "263801130039111864496112833575487560056",
                    "269669564528716007544443545703713001904",
                    "60633389927288413864848366737277760805",
                    "290979137464376980572950708702768901161",
                    "1970857837329699179112456956553063946",
                    "299128125954152784717191336551750832797",
                    "279135720815136243284555660171256049250",
                    "10213023027444447899879985237035070937",
                    "165926246857383907783906999578495737727",
                    "300441754469677617253548686873445832847",
                    "259312198332611260808968569782690794453",
                    "323010114877189455217253146049502175682",
                    "144225240368949474830081068397385282484",
                    "294322543911912669231190726672973077763",
                    "184189123450700339788508832681172809542",
                    "102951690528140699490102301119452753823",
                    "80129489034511768516733261044823630006",
                    "93942876337556753791699287089079298684",
                    "164911023940066993705672403596186224301",
                    "167959995421257083684450248556292204061",
                    "55176826979542356502545022377596998841",
                    "30386363714066131826112794057942105019",
                    "199709747821132286629902887160993539444",
                    "60319867725451458377901981560170042372",
                    "267260225804524451717942890480048590543",
                    "328439604590306333523028747255273525811",
                    "108899028056314496902670474583073468505",
                    "288087972405485571600842916132491684936",
                    "253642717460214581236448511620514690604",
                    "3330005601535471464808054154451289250",
                    "59878737459054529413549608729348969428"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c"
            },
            "id": "CVE-2023-53072-8c442e0a",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 871.0,
                "function_hash": "134933763249515982289526922239584185747"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_accept"
            },
            "id": "CVE-2023-53072-8d047c3d",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 97.0,
                "function_hash": "223455583428580156140479322207281783133"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "mptcp_force_close"
            },
            "id": "CVE-2023-53072-943868d6",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1112.0,
                "function_hash": "212223500279820455801205431217558184815"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "mptcp_subflow_queue_clean"
            },
            "id": "CVE-2023-53072-9d708e41",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 198.0,
                "function_hash": "256974172471499946625670847225064554225"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "subflow_drop_ctx"
            },
            "id": "CVE-2023-53072-a3dd0cce",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "232339187447269343920725892647320671725",
                    "140400038831176470260778451987131314466",
                    "15278363874831092745318850845670588623",
                    "170208051555680453301016410355993210354",
                    "44131465295695709796951099458540262428",
                    "130288033192254087241763224985370004400",
                    "218441347602215443316191214916374076125",
                    "286804539105659525808085677975103987675",
                    "169444894075076273011382829912498372474",
                    "129470895407329308050969002416368640731",
                    "263801130039111864496112833575487560056",
                    "269669564528716007544443545703713001904",
                    "60633389927288413864848366737277760805",
                    "290979137464376980572950708702768901161",
                    "1970857837329699179112456956553063946",
                    "299128125954152784717191336551750832797",
                    "279135720815136243284555660171256049250",
                    "10213023027444447899879985237035070937",
                    "165926246857383907783906999578495737727",
                    "300441754469677617253548686873445832847",
                    "259312198332611260808968569782690794453",
                    "323010114877189455217253146049502175682",
                    "144225240368949474830081068397385282484",
                    "294322543911912669231190726672973077763",
                    "184189123450700339788508832681172809542",
                    "102951690528140699490102301119452753823",
                    "80129489034511768516733261044823630006",
                    "93942876337556753791699287089079298684",
                    "164911023940066993705672403596186224301",
                    "167959995421257083684450248556292204061",
                    "55176826979542356502545022377596998841",
                    "30386363714066131826112794057942105019",
                    "199709747821132286629902887160993539444",
                    "60319867725451458377901981560170042372",
                    "267260225804524451717942890480048590543",
                    "328439604590306333523028747255273525811",
                    "108899028056314496902670474583073468505",
                    "288087972405485571600842916132491684936",
                    "253642717460214581236448511620514690604",
                    "3330005601535471464808054154451289250",
                    "59878737459054529413549608729348969428"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.c"
            },
            "id": "CVE-2023-53072-aca1fef6",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 198.0,
                "function_hash": "256974172471499946625670847225064554225"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "subflow_drop_ctx"
            },
            "id": "CVE-2023-53072-b696b8e7",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1112.0,
                "function_hash": "212223500279820455801205431217558184815"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "mptcp_subflow_queue_clean"
            },
            "id": "CVE-2023-53072-b93118bb",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 986.0,
                "function_hash": "208412306385774386721029701368803907108"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_sk_clone"
            },
            "id": "CVE-2023-53072-beb2b786",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1164.0,
                "function_hash": "286717979052638997391807830732703119462"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "__mptcp_close_ssk"
            },
            "id": "CVE-2023-53072-c200d833",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "274457165662248887514430509416093930973",
                    "317035022360957890817703959335476268692",
                    "172284990896194208333877263696130754856",
                    "223532525972969744727184055025324490876",
                    "178110967252507030939735323918273800031",
                    "283105023352395590152171005953740700346",
                    "179910966967349707897008895470671729059"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.h"
            },
            "id": "CVE-2023-53072-c47da23d",
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "318928469435359180078972111504091807056",
                    "135923664133972219779249520591818678367",
                    "64902104690528048051213181708295751202",
                    "335961032660293730602888026300126704472",
                    "64130839395838038656011824157960619291",
                    "19092842548998144079684567350269930836",
                    "134077836412840932676487375247354387865",
                    "124554421362113451902580562110177193045",
                    "171652386145591613155267006775047628711",
                    "136431589385061451952122350449034544855",
                    "67890667323464490359781597388731818353",
                    "86301041963458246388562338470160970260",
                    "40443573831643873853713601425585346689",
                    "302945361071942508229543244408412313037",
                    "12211008414623561692657186369035267829",
                    "45898130330341640044487851151369908176",
                    "112933545374108745574408947764930697176",
                    "334695479221412988193849208792775626347",
                    "319301863081343702949929848755655292660",
                    "302538740130951208058148273443076947945",
                    "45904712620603792277121668229894324243",
                    "28016734664882478059870493171699332995",
                    "318195119715342512053974590179068574260",
                    "20189902046219581987469166700692883095",
                    "36955324133292825724012946456963542264"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/subflow.c"
            },
            "id": "CVE-2023-53072-c652f976",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 198.0,
                "function_hash": "256974172471499946625670847225064554225"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "subflow_drop_ctx"
            },
            "id": "CVE-2023-53072-cbf436a1",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 985.0,
                "function_hash": "17196577100387003935230886499792525453"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_worker"
            },
            "id": "CVE-2023-53072-ccf8441a",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 300.0,
                "function_hash": "123858723609041884704904267393243380358"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/subflow.c",
                "function": "subflow_ulp_release"
            },
            "id": "CVE-2023-53072-cf89b465",
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 970.0,
                "function_hash": "272147243849138681085683252970360943938"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@804cf487fb0031f3c74755b78d8663333f0ba636",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "mptcp_worker"
            },
            "id": "CVE-2023-53072-d5c91c7a",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "274457165662248887514430509416093930973",
                    "317035022360957890817703959335476268692",
                    "172284990896194208333877263696130754856",
                    "223532525972969744727184055025324490876",
                    "178110967252507030939735323918273800031",
                    "283105023352395590152171005953740700346",
                    "179910966967349707897008895470671729059"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b6985b9b82954caa53f862d6059d06c0526254f0",
            "target": {
                "file": "net/mptcp/protocol.h"
            },
            "id": "CVE-2023-53072-dc9a8e04",
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 319.0,
                "function_hash": "233877238054178256167256899962858876868"
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c",
                "function": "__mptcp_close_subflow"
            },
            "id": "CVE-2023-53072-ecb1d208",
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "232339187447269343920725892647320671725",
                    "140400038831176470260778451987131314466",
                    "15278363874831092745318850845670588623",
                    "170208051555680453301016410355993210354",
                    "44131465295695709796951099458540262428",
                    "130288033192254087241763224985370004400",
                    "218441347602215443316191214916374076125",
                    "286804539105659525808085677975103987675",
                    "169444894075076273011382829912498372474",
                    "129470895407329308050969002416368640731",
                    "263801130039111864496112833575487560056",
                    "269669564528716007544443545703713001904",
                    "60633389927288413864848366737277760805",
                    "290979137464376980572950708702768901161",
                    "1970857837329699179112456956553063946",
                    "299128125954152784717191336551750832797",
                    "279135720815136243284555660171256049250",
                    "10213023027444447899879985237035070937",
                    "165926246857383907783906999578495737727",
                    "300441754469677617253548686873445832847",
                    "259312198332611260808968569782690794453",
                    "323010114877189455217253146049502175682",
                    "144225240368949474830081068397385282484",
                    "294322543911912669231190726672973077763",
                    "184189123450700339788508832681172809542",
                    "102951690528140699490102301119452753823",
                    "80129489034511768516733261044823630006",
                    "93942876337556753791699287089079298684",
                    "164911023940066993705672403596186224301",
                    "167959995421257083684450248556292204061",
                    "55176826979542356502545022377596998841",
                    "30386363714066131826112794057942105019",
                    "199709747821132286629902887160993539444",
                    "60319867725451458377901981560170042372",
                    "267260225804524451717942890480048590543",
                    "328439604590306333523028747255273525811",
                    "108899028056314496902670474583073468505",
                    "90362007926781680109721654971793385293",
                    "191343385746923389133483695230329728472",
                    "158818396843702033159420751186177419798"
                ]
            },
            "signature_version": "v1",
            "deprecated": false,
            "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2827f099b3fb9a59263c997400e9182f5d423e84",
            "target": {
                "file": "net/mptcp/protocol.c"
            },
            "id": "CVE-2023-53072-f2fd31cc",
            "signature_type": "Line"
        }
    ]
}

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.7.0
Fixed
6.1.22
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.8