{"id":"CVE-2023-53839","summary":"dccp: fix data-race around dp-\u003edccps_mss_cache","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ndccp: fix data-race around dp-\u003edccps_mss_cache\n\ndccp_sendmsg() reads dp-\u003edccps_mss_cache before locking the socket.\nSame thing in do_dccp_getsockopt().\n\nAdd READ_ONCE()/WRITE_ONCE() annotations,\nand change dccp_sendmsg() to check again dccps_mss_cache\nafter socket is locked.","modified":"2026-03-31T17:29:35.521785865Z","published":"2025-12-09T01:29:55.540Z","related":["SUSE-SU-2026:0278-1","SUSE-SU-2026:0281-1","SUSE-SU-2026:0293-1","SUSE-SU-2026:0315-1","SUSE-SU-2026:20477-1","SUSE-SU-2026:20498-1","SUSE-SU-2026:20845-1","SUSE-SU-2026:20876-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53839.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/162fa1e3cfb62aa780d7c40c8cccb6c2f8bef7c1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2bdc7f272b3a110a4e1fdee6c47c8d20f9b20817"},{"type":"WEB","url":"https://git.kernel.org/stable/c/67eebc7a9217f999b779d46fba5312a716f0dc1d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d701c95ee6463abcbb6da543060d6e444554135"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a47e598fbd8617967e49d85c49c22f9fc642704c"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a6ddc1c774874dc704f96a99d015dc759627bba7"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d1f38d313bdfc52fb2f662e66d0c60dd1cfe2384"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f239c9e1d98b313435481b4926e8bdd06197e4d8"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53839.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53839"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c"},{"fixed":"162fa1e3cfb62aa780d7c40c8cccb6c2f8bef7c1"},{"fixed":"2bdc7f272b3a110a4e1fdee6c47c8d20f9b20817"},{"fixed":"67eebc7a9217f999b779d46fba5312a716f0dc1d"},{"fixed":"6d701c95ee6463abcbb6da543060d6e444554135"},{"fixed":"f239c9e1d98b313435481b4926e8bdd06197e4d8"},{"fixed":"a6ddc1c774874dc704f96a99d015dc759627bba7"},{"fixed":"d1f38d313bdfc52fb2f662e66d0c60dd1cfe2384"},{"fixed":"a47e598fbd8617967e49d85c49c22f9fc642704c"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53839.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.14"},{"fixed":"4.14.323"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.15.0"},{"fixed":"4.19.292"}]},{"type":"ECOSYSTEM","events":[{"introduced":"4.20.0"},{"fixed":"5.4.254"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.191"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.127"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.46"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.4.11"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53839.json"}}],"schema_version":"1.7.5"}