{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2023-53825",
        "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "state": "PUBLISHED",
        "assignerShortName": "Linux",
        "dateReserved": "2025-12-09T01:27:17.824Z",
        "datePublished": "2025-12-09T01:29:38.539Z",
        "dateUpdated": "2026-05-11T19:52:15.748Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
                "shortName": "Linux",
                "dateUpdated": "2026-05-11T19:52:15.748Z"
            },
            "descriptions": [
                {
                    "lang": "en",
                    "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nkcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().\n\nsyzkaller found a memory leak in kcm_sendmsg(), and commit c821a88bd720\n(\"kcm: Fix memory leak in error path of kcm_sendmsg()\") suppressed it by\nupdating kcm_tx_msg(head)->last_skb if partial data is copied so that the\nfollowing sendmsg() will resume from the skb.\n\nHowever, we cannot know how many bytes were copied when we get the error.\nThus, we could mess up the MSG_MORE queue.\n\nWhen kcm_sendmsg() fails for SOCK_DGRAM, we should purge the queue as we\ndo so for UDP by udp_flush_pending_frames().\n\nEven without this change, when the error occurred, the following sendmsg()\nresumed from a wrong skb and the queue was messed up.  However, we have\nyet to get such a report, and only syzkaller stumbled on it.  So, this\ncan be changed safely.\n\nNote this does not change SOCK_SEQPACKET behaviour."
                }
            ],
            "affected": [
                {
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "unaffected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/kcm/kcmsock.c"
                    ],
                    "versions": [
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "21b467735b0888a8daa048f83d3b9b50fdab71ce",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "d4b8f380b0a041ee6a84fdac14127d8fe1dcad7b",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "1ce8362b4ac6b8e65fd04a22ea37ec776ee1ec5b",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "2e18493c421428a936946c452461b8e979088f17",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "55d2e7c1ab8eaa7b62575b8a4194132795d1f9fc",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "e5b28ce127a690f3acc49a6a342e6c9442c9edd6",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "992b2ac783aad360b98ed9d4686e86176a20f6f1",
                            "status": "affected",
                            "versionType": "git"
                        },
                        {
                            "version": "ab7ac4eb9832e32a09f4e8042705484d2fb0aad3",
                            "lessThan": "a22730b1b4bf437c6bbfdeff5feddf54be4aeada",
                            "status": "affected",
                            "versionType": "git"
                        }
                    ]
                },
                {
                    "product": "Linux",
                    "vendor": "Linux",
                    "defaultStatus": "affected",
                    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                    "programFiles": [
                        "net/kcm/kcmsock.c"
                    ],
                    "versions": [
                        {
                            "version": "4.6",
                            "status": "affected"
                        },
                        {
                            "version": "0",
                            "lessThan": "4.6",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "4.14.326",
                            "lessThanOrEqual": "4.14.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "4.19.295",
                            "lessThanOrEqual": "4.19.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.4.257",
                            "lessThanOrEqual": "5.4.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.10.195",
                            "lessThanOrEqual": "5.10.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "5.15.132",
                            "lessThanOrEqual": "5.15.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.1.54",
                            "lessThanOrEqual": "6.1.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.5.4",
                            "lessThanOrEqual": "6.5.*",
                            "status": "unaffected",
                            "versionType": "semver"
                        },
                        {
                            "version": "6.6",
                            "lessThanOrEqual": "*",
                            "status": "unaffected",
                            "versionType": "original_commit_for_fix"
                        }
                    ]
                }
            ],
            "cpeApplicability": [
                {
                    "nodes": [
                        {
                            "operator": "OR",
                            "negate": false,
                            "cpeMatch": [
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "4.14.326"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "4.19.295"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "5.4.257"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "5.10.195"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "5.15.132"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "6.1.54"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "6.5.4"
                                },
                                {
                                    "vulnerable": true,
                                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                                    "versionStartIncluding": "4.6",
                                    "versionEndExcluding": "6.6"
                                }
                            ]
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://git.kernel.org/stable/c/21b467735b0888a8daa048f83d3b9b50fdab71ce"
                },
                {
                    "url": "https://git.kernel.org/stable/c/d4b8f380b0a041ee6a84fdac14127d8fe1dcad7b"
                },
                {
                    "url": "https://git.kernel.org/stable/c/1ce8362b4ac6b8e65fd04a22ea37ec776ee1ec5b"
                },
                {
                    "url": "https://git.kernel.org/stable/c/2e18493c421428a936946c452461b8e979088f17"
                },
                {
                    "url": "https://git.kernel.org/stable/c/55d2e7c1ab8eaa7b62575b8a4194132795d1f9fc"
                },
                {
                    "url": "https://git.kernel.org/stable/c/e5b28ce127a690f3acc49a6a342e6c9442c9edd6"
                },
                {
                    "url": "https://git.kernel.org/stable/c/992b2ac783aad360b98ed9d4686e86176a20f6f1"
                },
                {
                    "url": "https://git.kernel.org/stable/c/a22730b1b4bf437c6bbfdeff5feddf54be4aeada"
                }
            ],
            "title": "kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().",
            "x_generator": {
                "engine": "bippy-1.2.0"
            }
        }
    }
}