In the Linux kernel, the following vulnerability has been resolved: net: fix skb leak in __skb_tstamp_tx() Commit 50749f2dd685 ("tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.") added a call to skb_orphan_frags_rx() to fix leaks with zerocopy skbs. But it ended up adding a leak of its own. When skb_orphan_frags_rx() fails, the function just returns, leaking the skb it just cloned. Free it before returning. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/58766252f6b2c0487cda6976a53d2bb03ae28e2a cve-icon cve-icon
https://git.kernel.org/stable/c/779332447108545ef04682ea29af5f85c0202aee cve-icon cve-icon
https://git.kernel.org/stable/c/82501f1ead557cbee1c2467654ec109a80334d22 cve-icon cve-icon
https://git.kernel.org/stable/c/8a02fb71d7192ff1a9a47c9d937624966c6e09af cve-icon cve-icon
https://git.kernel.org/stable/c/a594382ec6d0cc8cff5a8bc7e61b54e3858fb243 cve-icon cve-icon
https://git.kernel.org/stable/c/cc18b4685910d5d9de8314bae9c55790701b1811 cve-icon cve-icon
https://git.kernel.org/stable/c/e06841a2abf9c82735cee39e88b1d79464088840 cve-icon cve-icon
https://git.kernel.org/stable/c/f4d928c00254cfc9dd0ee7076f4a59bceec675f4 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025102214-CVE-2023-53716-4265@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53716 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53716 cve-icon
History

Thu, 23 Oct 2025 10:30:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 23 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Wed, 22 Oct 2025 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: net: fix skb leak in __skb_tstamp_tx() Commit 50749f2dd685 ("tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp.") added a call to skb_orphan_frags_rx() to fix leaks with zerocopy skbs. But it ended up adding a leak of its own. When skb_orphan_frags_rx() fails, the function just returns, leaking the skb it just cloned. Free it before returning. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
Title net: fix skb leak in __skb_tstamp_tx()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-10-22T13:23:49.536Z

Updated: 2025-10-22T13:23:49.536Z

Reserved: 2025-10-22T13:21:37.347Z

Link: CVE-2023-53716

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-22T14:15:46.250

Modified: 2025-10-22T21:12:48.953

Link: CVE-2023-53716

cve-icon Redhat

Severity : Low

Publid Date: 2025-10-22T00:00:00Z

Links: CVE-2023-53716 - Bugzilla