PT-2025-18854 · Linux+5 · Linux Kernel+5
Publicado
2023-11-07
·
Atualizado
2026-01-28
·
CVE-2023-53090
CVSS v3.1
7.1
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to an illegal memory access in the Linux kernel, specifically in the
kfd wait on events() function. The kfd event waiter structure is allocated but not properly initialized, leading to a system crash when an exception occurs. The crash log indicates a problem with memory access, resulting in a system crash. The estimated number of potentially affected devices worldwide is not available.Recommendations
To resolve the issue, allocate the
kfd event waiter structure with kcalloc and remove redundant 0-initialization and a redundant loop condition check.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
DoS
Out of bounds Read
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Astra Linux
Centos
Linux Kernel
Red Hat
Red Os
Suse