CVE-2023-53020

In the Linux kernel, the following vulnerability has been resolved: l2tp: close all race conditions in l2tp_tunnel_register() The code in l2tp_tunnel_register() is racy in several ways: 1. It modifies the tunnel socket _after_ publishing it. 2. It calls setup_udp_tunnel_sock() on an existing socket without locking. 3. It changes sock lock class on fly, which triggers many syzbot reports. This patch amends all of them by moving socket initialization code before publishing and under sock lock. As suggested by Jakub, the l2tp lockdep class is not necessary as we can just switch to bh_lock_sock_nested().

• CWE-362
• CWE-362

• https://git.kernel.org/stable/c/0b2c59720e65885a394a017d0cf9cab118914682Patch
• https://git.kernel.org/stable/c/2d77e5c0ad79004b5ef901895437e9cce6dfcc7ePatch
• https://git.kernel.org/stable/c/77e8ed776cdb1a24b2aab8fe7c6f1f154235e1cePatch
• https://git.kernel.org/stable/c/cef0845b6dcfa2f6c2c832e7f9622551456c741dPatch

Published

Mar 27, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-53015In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53016In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53017In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53018In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53019In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-5302A vulnerability, which was classified as problematic, has be…5.4
• CVE-2023-53021In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-53022In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-53023In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2023-53024In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-53025Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-53026In the Linux kernel, the following vulnerability has been re…5.5