CVE-2023-53189
mediumpriority · track · 22EPSS 0.002 · 6 %ileDEEURUUSEPSS · scored 2026-10-27
In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout. There is a time gap in [1], during which if the pending rs_timer becomes not pending. It will miss to hold idev, but the rs_timer is activated. Thus rs_timer callback function addrconf_rs_timer() will be executed and put idev later without holding idev. A refcount underflow issue for idev can be caused by this. if (!timer_pending(&idev->rs_timer)) in6_dev_hold(idev); <--------------[1] mod_timer(&idev->rs_timer, jiffies + when); To fix the issue, hold idev if mod_timer() return 0.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–7.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (65)
Products and version ranges known to be affected.
advisories (2)
Vendor and ecosystem advisories describing this.
- WID-SEC-W-2025-2053Linux Kernel: Mehrere SchwachstellenDeutsch2025-09-15csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen im Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder nicht näher beschriebene Auswirkungen zu erzielen.
- WID-SEC-W-2026-0349Dell Avamar und NetWorker: Mehrere SchwachstellenDeutsch2026-02-09csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Avamar und Dell NetWorker ausnutzen, um Angriffe zu starten, die die Integrität, Vertraulichkeit und Verfügbarkeit von Systemen beeinträchtigen.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (25)
External citations — patches, advisories, analysis.
- https://git.kernel.org/stable/c/06a0716949c22e2aefb648526580671197151acccnnvd
- https://git.kernel.org/stable/c/1f656e483eb4733d62f18dfb206a49b78f60f495cnnvd
- https://git.kernel.org/stable/c/2ad31ce40e8182860b631e37209e93e543790b7ccnnvd
- https://git.kernel.org/stable/c/436b7cc7eae7851c184b671ed7a4a64c750b86f7cnnvd
- https://git.kernel.org/stable/c/82abd1c37d3bf2a2658b34772c17a25a6f9cca42cnnvd
- https://git.kernel.org/stable/c/c6395e32935d35e6f935e7caf1c2dac5a95943b4cnnvd
- https://git.kernel.org/stable/c/c7eeba47058532f6077d6a658e38b6698f6ae71acnnvd
- https://git.kernel.org/stable/c/df62fdcd004afa72ecbed0e862ebb983acd3aa57cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan