CVE-2023-53839

dccp: fix data-race around dp->dccps_mss_cache

State: Published
Severity: Not scored
Published: Dec 9, 2025
Updated: May 11, 2026
Reserved: Dec 9, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

dccp: fix data-race around dp->dccps_mss_cache

dccp_sendmsg() reads dp->dccps_mss_cache before locking the socket. Same thing in do_dccp_getsockopt().

Add READ_ONCE()/WRITE_ONCE() annotations, and change dccp_sendmsg() to check again dccps_mss_cache after socket is locked.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 162fa1e3cfb62aa780d7c40c8cccb6c2f8bef7c1Affected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 2bdc7f272b3a110a4e1fdee6c47c8d20f9b20817Affected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 67eebc7a9217f999b779d46fba5312a716f0dc1dAffected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 6d701c95ee6463abcbb6da543060d6e444554135Affected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before f239c9e1d98b313435481b4926e8bdd06197e4d8Affected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before a6ddc1c774874dc704f96a99d015dc759627bba7Affected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before d1f38d313bdfc52fb2f662e66d0c60dd1cfe2384Affected 7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before a47e598fbd8617967e49d85c49c22f9fc642704cAffected
LinuxLinux	2.6.14Affected before 2.6.14Not affected 4.14.323 through 4.14.Not affected 4.19.292 through 4.19.Not affected 5.4.254 through 5.4.Not affected 5.10.191 through 5.10.Not affected 5.15.127 through 5.15.Not affected 6.1.46 through 6.1.Not affected 6.4.11 through 6.4.*Not affected 6.5 and laterNot affected

Product

Versions

LinuxLinux

7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 162fa1e3cfb62aa780d7c40c8cccb6c2f8bef7c1Affected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 2bdc7f272b3a110a4e1fdee6c47c8d20f9b20817Affected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 67eebc7a9217f999b779d46fba5312a716f0dc1dAffected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before 6d701c95ee6463abcbb6da543060d6e444554135Affected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before f239c9e1d98b313435481b4926e8bdd06197e4d8Affected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before a6ddc1c774874dc704f96a99d015dc759627bba7Affected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before d1f38d313bdfc52fb2f662e66d0c60dd1cfe2384Affected
7c657876b63cb1d8a2ec06f8fc6c37bb8412e66c to before a47e598fbd8617967e49d85c49c22f9fc642704cAffected

LinuxLinux

2.6.14Affected
before 2.6.14Not affected
4.14.323 through 4.14.*Not affected
4.19.292 through 4.19.*Not affected
5.4.254 through 5.4.*Not affected
5.10.191 through 5.10.*Not affected
5.15.127 through 5.15.*Not affected
6.1.46 through 6.1.*Not affected
6.4.11 through 6.4.*Not affected
6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.