Memory Leak Vulnerability in Linux Kernel's TUN Device Functionality

CVE-2023-53685

What is CVE-2023-53685?

A vulnerability in the Linux kernel related to the TUN device has been identified, causing memory leaks associated with socket buffers (skb) and socket structures (sk). This occurs when the TUN device is detached while still handling network packets, potentially leading to resource exhaustion. When NAPI and multi-queue features are enabled on a TUN device, there is a race condition that allows for the insertion of skb into the write queue even after the queue has been detached. Proper handling ensures that these actions are synchronized to avoid memory leaks and maintain system stability.

References