CVE-2023-54094
A critical bug in the Linux kernel could corrupt packet buffers when certain network packets are processed, potentially causing system crashes. The issue arises when GRO-ed packets are segmented and written to shared packet buffers. The kernel has been patched to prevent this corruption.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
All Linux systems running a kernel version that contains the vulnerable code, before the patch is applied. The specific affected kernel versions are not listed in the provided data.
Real-world impact
An attacker could trigger kernel crashes or potentially gain arbitrary code execution by sending specially crafted network packets that exploit the skb corruption.
Why this severity
The CVSS score of 9.8 reflects that the vulnerability is exploitable over the network with no authentication or user interaction, and it can lead to complete compromise of confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the fix for CVE-2023-54094.
- 02Reboot the system to load the new kernel.
NVD-referenced vendor advisory
Timeline
- Dec 24, 2025 · Dec 24, 2025PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 1d agoAdvisory updatedThe NVD record was last revised.
- Aug 4, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.