In the Linux kernel, the following vulnerability has been resolved:
dccp: fix data-race around dp->dccpsmsscache
dccpsendmsg() reads dp->dccpsmsscache before locking the socket. Same thing in dodccp_getsockopt().
Add READONCE()/WRITEONCE() annotations, and change dccpsendmsg() to check again dccpsmss_cache after socket is locked.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53839.json"
}