CVE-2023-53995
Published: Dec 24, 2025
Modified: May 11, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: net: ipv4: fix one memleak in __inet_del_ifa() I got the below warning when do fuzzing test: unregister_netdevice: waiting for bond0 to become free. Usage count = 2 It can be repoduced via: ip link add bond0 type bond sysctl -w net.ipv4.conf.bond0.promote_secondaries=1 ip addr add 4.117.174.103/0 scope 0x40 dev bond0 ip addr add 192.168.100.111/255.255.255.254 scope 0 dev bond0 ip addr add 0.0.0.4/0 scope 0x40 secondary dev bond0 ip addr del 4.117.174.103/0 scope 0x40 dev bond0 ip link delete bond0 type bond In this reproduction test case, an incorrect 'last_prim' is found in __inet_del_ifa(), as a result, the secondary address(0.0.0.4/0 scope 0x40) is lost. The memory of the secondary address is leaked and the reference of in_device and net_device is leaked. Fix this problem: Look for 'last_prim' starting at location of the deleted IP and inserting the promoted IP into the location of 'last_prim'.
| Vendor | Product | Versions |
|---|---|---|
Linux | Linux | affected 0ff60a45678e67b2547256a636fd00c1667ce4fa - < 5624f26a3574500ce23929cb2c9976a0dec9920aaffected 0ff60a45678e67b2547256a636fd00c1667ce4fa - < 7c8ddcdab1b900bed69cad6beef477fff116289eaffected 0ff60a45678e67b2547256a636fd00c1667ce4fa - < 2f1e86014d0cc084886c36a2d77bc620e2d42618affected 0ff60a45678e67b2547256a636fd00c1667ce4fa - < 980f8445479814509a3cd55a8eabaae1c9030a4caffected 0ff60a45678e67b2547256a636fd00c1667ce4fa - < 42652af5360d30b43b06057c193739e7dfb18f42+1 more versions |
Linux | Linux | affected 2.6.15unaffected 0 - < 2.6.15unaffected 5.4.257 - <= 5.4.*unaffected 5.10.195 - <= 5.10.*unaffected 5.15.132 - <= 5.15.*+3 more versions |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now