CVE-2023-52435

Summary

CVE-2023-52435 is a vulnerability affecting the Linux kernel that allows for a crash in the `skb_segment()` function. The issue stems from a potential mss (Maximum Segment Size) overflow, which can be triggered when the computation in `skb_segment()` results in a value larger than GSO_BY_FRAGS. This can cause a null-pointer dereference and system crash. The vulnerability was discovered during a Google Compute Engine instance's execution of syzkaller, a source code fuzzer. The affected component is the networking subsystem, and the issue is resolved in version 6.7.0-rc4 of the kernel.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.