In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout. There is a time gap in [1], during which if the pending rs_timer becomes not pending. It will miss to hold idev, but the rs_timer is activated. Thus rs_timer callback function addrconf_rs_timer() will be executed and put idev later without holding idev. A refcount underflow issue for idev can be caused by this. if (!timer_pending(&idev->rs_timer)) in6_dev_hold(idev); <--------------[1] mod_timer(&idev->rs_timer, jiffies + when); To fix the issue, hold idev if mod_timer() return 0.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/06a0716949c22e2aefb648526580671197151acc cve-icon cve-icon
https://git.kernel.org/stable/c/1f656e483eb4733d62f18dfb206a49b78f60f495 cve-icon cve-icon
https://git.kernel.org/stable/c/2ad31ce40e8182860b631e37209e93e543790b7c cve-icon cve-icon
https://git.kernel.org/stable/c/436b7cc7eae7851c184b671ed7a4a64c750b86f7 cve-icon cve-icon
https://git.kernel.org/stable/c/82abd1c37d3bf2a2658b34772c17a25a6f9cca42 cve-icon cve-icon
https://git.kernel.org/stable/c/c6395e32935d35e6f935e7caf1c2dac5a95943b4 cve-icon cve-icon
https://git.kernel.org/stable/c/c7eeba47058532f6077d6a658e38b6698f6ae71a cve-icon cve-icon
https://git.kernel.org/stable/c/df62fdcd004afa72ecbed0e862ebb983acd3aa57 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091557-CVE-2023-53189-19c2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53189 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53189 cve-icon
History

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Tue, 16 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Mon, 15 Sep 2025 14:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ipv6/addrconf: fix a potential refcount underflow for idev Now in addrconf_mod_rs_timer(), reference idev depends on whether rs_timer is not pending. Then modify rs_timer timeout. There is a time gap in [1], during which if the pending rs_timer becomes not pending. It will miss to hold idev, but the rs_timer is activated. Thus rs_timer callback function addrconf_rs_timer() will be executed and put idev later without holding idev. A refcount underflow issue for idev can be caused by this. if (!timer_pending(&idev->rs_timer)) in6_dev_hold(idev); <--------------[1] mod_timer(&idev->rs_timer, jiffies + when); To fix the issue, hold idev if mod_timer() return 0.
Title ipv6/addrconf: fix a potential refcount underflow for idev
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-15T14:05:26.685Z

Updated: 2025-09-15T14:05:26.685Z

Reserved: 2025-09-15T13:59:19.066Z

Link: CVE-2023-53189

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-15T14:15:41.150

Modified: 2025-09-15T15:22:27.090

Link: CVE-2023-53189

cve-icon Redhat

Severity : Important

Publid Date: 2025-09-15T00:00:00Z

Links: CVE-2023-53189 - Bugzilla