CVE-2023-53190 (GCVE-0-2023-53190)

Vulnerability from cvelistv5 – Published: 2025-09-15 14:06 – Updated: 2026-05-11 19:39
VLAI
Title
vxlan: Fix memory leaks in error path
Summary
In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix memory leaks in error path The memory allocated by vxlan_vnigroup_init() is not freed in the error path, leading to memory leaks [1]. Fix by calling vxlan_vnigroup_uninit() in the error path. The leaks can be reproduced by annotating gro_cells_init() with ALLOW_ERROR_INJECTION() and then running: # echo "100" > /sys/kernel/debug/fail_function/probability # echo "1" > /sys/kernel/debug/fail_function/times # echo "gro_cells_init" > /sys/kernel/debug/fail_function/inject # printf %#x -12 > /sys/kernel/debug/fail_function/gro_cells_init/retval # ip link add name vxlan0 type vxlan dstport 4789 external vnifilter RTNETLINK answers: Cannot allocate memory [1] unreferenced object 0xffff88810db84a00 (size 512): comm "ip", pid 330, jiffies 4295010045 (age 66.016s) hex dump (first 32 bytes): f8 d5 76 0e 81 88 ff ff 01 00 00 00 00 00 00 02 ..v............. 03 00 04 00 48 00 00 00 00 00 00 01 04 00 01 00 ....H........... backtrace: [<ffffffff81a3097a>] kmalloc_trace+0x2a/0x60 [<ffffffff82f049fc>] vxlan_vnigroup_init+0x4c/0x160 [<ffffffff82ecd69e>] vxlan_init+0x1ae/0x280 [<ffffffff836858ca>] register_netdevice+0x57a/0x16d0 [<ffffffff82ef67b7>] __vxlan_dev_create+0x7c7/0xa50 [<ffffffff82ef6ce6>] vxlan_newlink+0xd6/0x130 [<ffffffff836d02ab>] __rtnl_newlink+0x112b/0x18a0 [<ffffffff836d0a8c>] rtnl_newlink+0x6c/0xa0 [<ffffffff836c0ddf>] rtnetlink_rcv_msg+0x43f/0xd40 [<ffffffff83908ce0>] netlink_rcv_skb+0x170/0x440 [<ffffffff839066af>] netlink_unicast+0x53f/0x810 [<ffffffff839072d8>] netlink_sendmsg+0x958/0xe70 [<ffffffff835c319f>] ____sys_sendmsg+0x78f/0xa90 [<ffffffff835cd6da>] ___sys_sendmsg+0x13a/0x1e0 [<ffffffff835cd94c>] __sys_sendmsg+0x11c/0x1f0 [<ffffffff8424da78>] do_syscall_64+0x38/0x80 unreferenced object 0xffff88810e76d5f8 (size 192): comm "ip", pid 330, jiffies 4295010045 (age 66.016s) hex dump (first 32 bytes): 04 00 00 00 00 00 00 00 db e1 4f e7 00 00 00 00 ..........O..... 08 d6 76 0e 81 88 ff ff 08 d6 76 0e 81 88 ff ff ..v.......v..... backtrace: [<ffffffff81a3162e>] __kmalloc_node+0x4e/0x90 [<ffffffff81a0e166>] kvmalloc_node+0xa6/0x1f0 [<ffffffff8276e1a3>] bucket_table_alloc.isra.0+0x83/0x460 [<ffffffff8276f18b>] rhashtable_init+0x43b/0x7c0 [<ffffffff82f04a1c>] vxlan_vnigroup_init+0x6c/0x160 [<ffffffff82ecd69e>] vxlan_init+0x1ae/0x280 [<ffffffff836858ca>] register_netdevice+0x57a/0x16d0 [<ffffffff82ef67b7>] __vxlan_dev_create+0x7c7/0xa50 [<ffffffff82ef6ce6>] vxlan_newlink+0xd6/0x130 [<ffffffff836d02ab>] __rtnl_newlink+0x112b/0x18a0 [<ffffffff836d0a8c>] rtnl_newlink+0x6c/0xa0 [<ffffffff836c0ddf>] rtnetlink_rcv_msg+0x43f/0xd40 [<ffffffff83908ce0>] netlink_rcv_skb+0x170/0x440 [<ffffffff839066af>] netlink_unicast+0x53f/0x810 [<ffffffff839072d8>] netlink_sendmsg+0x958/0xe70 [<ffffffff835c319f>] ____sys_sendmsg+0x78f/0xa90
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f9c4bb0b245cee35ef66f75bf409c9573d934cf9 , < 75c1ab900f7cf0485f0be1607c79c55f51faaa90 (git)
Affected: f9c4bb0b245cee35ef66f75bf409c9573d934cf9 , < 5896f55810680391a32652ca2b91245a05c11e22 (git)
Affected: f9c4bb0b245cee35ef66f75bf409c9573d934cf9 , < 06bf62944144a92d83dd14fd1378d2a288259561 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.18
Unaffected: 0 , < 5.18 (semver)
Unaffected: 6.0.19 , ≤ 6.0.* (semver)
Unaffected: 6.1.5 , ≤ 6.1.* (semver)
Unaffected: 6.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/vxlan/vxlan_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "75c1ab900f7cf0485f0be1607c79c55f51faaa90",
              "status": "affected",
              "version": "f9c4bb0b245cee35ef66f75bf409c9573d934cf9",
              "versionType": "git"
            },
            {
              "lessThan": "5896f55810680391a32652ca2b91245a05c11e22",
              "status": "affected",
              "version": "f9c4bb0b245cee35ef66f75bf409c9573d934cf9",
              "versionType": "git"
            },
            {
              "lessThan": "06bf62944144a92d83dd14fd1378d2a288259561",
              "status": "affected",
              "version": "f9c4bb0b245cee35ef66f75bf409c9573d934cf9",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/vxlan/vxlan_core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.18"
            },
            {
              "lessThan": "5.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.0.*",
              "status": "unaffected",
              "version": "6.0.19",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.0.19",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.5",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2",
                  "versionStartIncluding": "5.18",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix memory leaks in error path\n\nThe memory allocated by vxlan_vnigroup_init() is not freed in the error\npath, leading to memory leaks [1]. Fix by calling\nvxlan_vnigroup_uninit() in the error path.\n\nThe leaks can be reproduced by annotating gro_cells_init() with\nALLOW_ERROR_INJECTION() and then running:\n\n # echo \"100\" \u003e /sys/kernel/debug/fail_function/probability\n # echo \"1\" \u003e /sys/kernel/debug/fail_function/times\n # echo \"gro_cells_init\" \u003e /sys/kernel/debug/fail_function/inject\n # printf %#x -12 \u003e /sys/kernel/debug/fail_function/gro_cells_init/retval\n # ip link add name vxlan0 type vxlan dstport 4789 external vnifilter\n RTNETLINK answers: Cannot allocate memory\n\n[1]\nunreferenced object 0xffff88810db84a00 (size 512):\n  comm \"ip\", pid 330, jiffies 4295010045 (age 66.016s)\n  hex dump (first 32 bytes):\n    f8 d5 76 0e 81 88 ff ff 01 00 00 00 00 00 00 02  ..v.............\n    03 00 04 00 48 00 00 00 00 00 00 01 04 00 01 00  ....H...........\n  backtrace:\n    [\u003cffffffff81a3097a\u003e] kmalloc_trace+0x2a/0x60\n    [\u003cffffffff82f049fc\u003e] vxlan_vnigroup_init+0x4c/0x160\n    [\u003cffffffff82ecd69e\u003e] vxlan_init+0x1ae/0x280\n    [\u003cffffffff836858ca\u003e] register_netdevice+0x57a/0x16d0\n    [\u003cffffffff82ef67b7\u003e] __vxlan_dev_create+0x7c7/0xa50\n    [\u003cffffffff82ef6ce6\u003e] vxlan_newlink+0xd6/0x130\n    [\u003cffffffff836d02ab\u003e] __rtnl_newlink+0x112b/0x18a0\n    [\u003cffffffff836d0a8c\u003e] rtnl_newlink+0x6c/0xa0\n    [\u003cffffffff836c0ddf\u003e] rtnetlink_rcv_msg+0x43f/0xd40\n    [\u003cffffffff83908ce0\u003e] netlink_rcv_skb+0x170/0x440\n    [\u003cffffffff839066af\u003e] netlink_unicast+0x53f/0x810\n    [\u003cffffffff839072d8\u003e] netlink_sendmsg+0x958/0xe70\n    [\u003cffffffff835c319f\u003e] ____sys_sendmsg+0x78f/0xa90\n    [\u003cffffffff835cd6da\u003e] ___sys_sendmsg+0x13a/0x1e0\n    [\u003cffffffff835cd94c\u003e] __sys_sendmsg+0x11c/0x1f0\n    [\u003cffffffff8424da78\u003e] do_syscall_64+0x38/0x80\nunreferenced object 0xffff88810e76d5f8 (size 192):\n  comm \"ip\", pid 330, jiffies 4295010045 (age 66.016s)\n  hex dump (first 32 bytes):\n    04 00 00 00 00 00 00 00 db e1 4f e7 00 00 00 00  ..........O.....\n    08 d6 76 0e 81 88 ff ff 08 d6 76 0e 81 88 ff ff  ..v.......v.....\n  backtrace:\n    [\u003cffffffff81a3162e\u003e] __kmalloc_node+0x4e/0x90\n    [\u003cffffffff81a0e166\u003e] kvmalloc_node+0xa6/0x1f0\n    [\u003cffffffff8276e1a3\u003e] bucket_table_alloc.isra.0+0x83/0x460\n    [\u003cffffffff8276f18b\u003e] rhashtable_init+0x43b/0x7c0\n    [\u003cffffffff82f04a1c\u003e] vxlan_vnigroup_init+0x6c/0x160\n    [\u003cffffffff82ecd69e\u003e] vxlan_init+0x1ae/0x280\n    [\u003cffffffff836858ca\u003e] register_netdevice+0x57a/0x16d0\n    [\u003cffffffff82ef67b7\u003e] __vxlan_dev_create+0x7c7/0xa50\n    [\u003cffffffff82ef6ce6\u003e] vxlan_newlink+0xd6/0x130\n    [\u003cffffffff836d02ab\u003e] __rtnl_newlink+0x112b/0x18a0\n    [\u003cffffffff836d0a8c\u003e] rtnl_newlink+0x6c/0xa0\n    [\u003cffffffff836c0ddf\u003e] rtnetlink_rcv_msg+0x43f/0xd40\n    [\u003cffffffff83908ce0\u003e] netlink_rcv_skb+0x170/0x440\n    [\u003cffffffff839066af\u003e] netlink_unicast+0x53f/0x810\n    [\u003cffffffff839072d8\u003e] netlink_sendmsg+0x958/0xe70\n    [\u003cffffffff835c319f\u003e] ____sys_sendmsg+0x78f/0xa90"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T19:39:59.480Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/75c1ab900f7cf0485f0be1607c79c55f51faaa90"
        },
        {
          "url": "https://git.kernel.org/stable/c/5896f55810680391a32652ca2b91245a05c11e22"
        },
        {
          "url": "https://git.kernel.org/stable/c/06bf62944144a92d83dd14fd1378d2a288259561"
        }
      ],
      "title": "vxlan: Fix memory leaks in error path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53190",
    "datePublished": "2025-09-15T14:06:19.139Z",
    "dateReserved": "2025-09-15T13:59:19.066Z",
    "dateUpdated": "2026-05-11T19:39:59.480Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53190",
      "date": "2026-09-27",
      "epss": "0.00173",
      "percentile": "0.06053"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/vxlan/vxlan_core.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "75c1ab900f7cf0485f0be1607c79c55f51faaa90",
                    "status": "affected",
                    "version": "f9c4bb0b245cee35ef66f75bf409c9573d934cf9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "5896f55810680391a32652ca2b91245a05c11e22",
                    "status": "affected",
                    "version": "f9c4bb0b245cee35ef66f75bf409c9573d934cf9",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "06bf62944144a92d83dd14fd1378d2a288259561",
                    "status": "affected",
                    "version": "f9c4bb0b245cee35ef66f75bf409c9573d934cf9",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "drivers/net/vxlan/vxlan_core.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.18"
                  },
                  {
                    "lessThan": "5.18",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.0.*",
                    "status": "unaffected",
                    "version": "6.0.19",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.5",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "DED16365-2AE7-4932-8E1F-E3AF25424531",
                    "versionEndExcluding": "6.0.19",
                    "versionStartIncluding": "5.18",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "8C1E7766-4310-43F9-BAC4-3763A36C043A",
                    "versionEndExcluding": "6.1.5",
                    "versionStartIncluding": "6.1",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:*",
                    "matchCriteriaId": "FF501633-2F44-4913-A8EE-B021929F49F6",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:*",
                    "matchCriteriaId": "2BDA597B-CAC1-4DF0-86F0-42E142C654E9",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nvxlan: Fix memory leaks in error path\n\nThe memory allocated by vxlan_vnigroup_init() is not freed in the error\npath, leading to memory leaks [1]. Fix by calling\nvxlan_vnigroup_uninit() in the error path.\n\nThe leaks can be reproduced by annotating gro_cells_init() with\nALLOW_ERROR_INJECTION() and then running:\n\n # echo \"100\" \u003e /sys/kernel/debug/fail_function/probability\n # echo \"1\" \u003e /sys/kernel/debug/fail_function/times\n # echo \"gro_cells_init\" \u003e /sys/kernel/debug/fail_function/inject\n # printf %#x -12 \u003e /sys/kernel/debug/fail_function/gro_cells_init/retval\n # ip link add name vxlan0 type vxlan dstport 4789 external vnifilter\n RTNETLINK answers: Cannot allocate memory\n\n[1]\nunreferenced object 0xffff88810db84a00 (size 512):\n  comm \"ip\", pid 330, jiffies 4295010045 (age 66.016s)\n  hex dump (first 32 bytes):\n    f8 d5 76 0e 81 88 ff ff 01 00 00 00 00 00 00 02  ..v.............\n    03 00 04 00 48 00 00 00 00 00 00 01 04 00 01 00  ....H...........\n  backtrace:\n    [\u003cffffffff81a3097a\u003e] kmalloc_trace+0x2a/0x60\n    [\u003cffffffff82f049fc\u003e] vxlan_vnigroup_init+0x4c/0x160\n    [\u003cffffffff82ecd69e\u003e] vxlan_init+0x1ae/0x280\n    [\u003cffffffff836858ca\u003e] register_netdevice+0x57a/0x16d0\n    [\u003cffffffff82ef67b7\u003e] __vxlan_dev_create+0x7c7/0xa50\n    [\u003cffffffff82ef6ce6\u003e] vxlan_newlink+0xd6/0x130\n    [\u003cffffffff836d02ab\u003e] __rtnl_newlink+0x112b/0x18a0\n    [\u003cffffffff836d0a8c\u003e] rtnl_newlink+0x6c/0xa0\n    [\u003cffffffff836c0ddf\u003e] rtnetlink_rcv_msg+0x43f/0xd40\n    [\u003cffffffff83908ce0\u003e] netlink_rcv_skb+0x170/0x440\n    [\u003cffffffff839066af\u003e] netlink_unicast+0x53f/0x810\n    [\u003cffffffff839072d8\u003e] netlink_sendmsg+0x958/0xe70\n    [\u003cffffffff835c319f\u003e] ____sys_sendmsg+0x78f/0xa90\n    [\u003cffffffff835cd6da\u003e] ___sys_sendmsg+0x13a/0x1e0\n    [\u003cffffffff835cd94c\u003e] __sys_sendmsg+0x11c/0x1f0\n    [\u003cffffffff8424da78\u003e] do_syscall_64+0x38/0x80\nunreferenced object 0xffff88810e76d5f8 (size 192):\n  comm \"ip\", pid 330, jiffies 4295010045 (age 66.016s)\n  hex dump (first 32 bytes):\n    04 00 00 00 00 00 00 00 db e1 4f e7 00 00 00 00  ..........O.....\n    08 d6 76 0e 81 88 ff ff 08 d6 76 0e 81 88 ff ff  ..v.......v.....\n  backtrace:\n    [\u003cffffffff81a3162e\u003e] __kmalloc_node+0x4e/0x90\n    [\u003cffffffff81a0e166\u003e] kvmalloc_node+0xa6/0x1f0\n    [\u003cffffffff8276e1a3\u003e] bucket_table_alloc.isra.0+0x83/0x460\n    [\u003cffffffff8276f18b\u003e] rhashtable_init+0x43b/0x7c0\n    [\u003cffffffff82f04a1c\u003e] vxlan_vnigroup_init+0x6c/0x160\n    [\u003cffffffff82ecd69e\u003e] vxlan_init+0x1ae/0x280\n    [\u003cffffffff836858ca\u003e] register_netdevice+0x57a/0x16d0\n    [\u003cffffffff82ef67b7\u003e] __vxlan_dev_create+0x7c7/0xa50\n    [\u003cffffffff82ef6ce6\u003e] vxlan_newlink+0xd6/0x130\n    [\u003cffffffff836d02ab\u003e] __rtnl_newlink+0x112b/0x18a0\n    [\u003cffffffff836d0a8c\u003e] rtnl_newlink+0x6c/0xa0\n    [\u003cffffffff836c0ddf\u003e] rtnetlink_rcv_msg+0x43f/0xd40\n    [\u003cffffffff83908ce0\u003e] netlink_rcv_skb+0x170/0x440\n    [\u003cffffffff839066af\u003e] netlink_unicast+0x53f/0x810\n    [\u003cffffffff839072d8\u003e] netlink_sendmsg+0x958/0xe70\n    [\u003cffffffff835c319f\u003e] ____sys_sendmsg+0x78f/0xa90"
          }
        ],
        "id": "CVE-2023-53190",
        "lastModified": "2026-06-17T06:44:28.287",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-09-15T14:15:41.277",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/06bf62944144a92d83dd14fd1378d2a288259561"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/5896f55810680391a32652ca2b91245a05c11e22"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/75c1ab900f7cf0485f0be1607c79c55f51faaa90"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Analyzed",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-401"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:33:25+00:00",
      "cve": "CVE-2023-53190",
      "id": "CVE-2023-53190",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "108",
      "product_status:known_not_affected": "166",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: vxlan: Fix memory leaks in error path",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53190.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-01T01:16:31Z",
      "cve": "CVE-2023-53190",
      "id": "CVE-2023-53190",
      "initial_release_date": "2025-09-15T23:27:44Z",
      "product_status:known_not_affected": "523",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53190",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53190.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.