PT-2025-38030 · Linux+2 · Linux Kernel+2

Publicado 2023-07-03 · Atualizado 2025-11-19 · CVE-2023-53312

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.30-syzkaller

Description A flaw was discovered in the Linux kernel related to the interaction between the net dev start xmit trace event and the skb transport offset() function. Specifically, the issue arises from incorrect handling of skb transport offset() after a certain commit, as highlighted by syzbot. This can lead to a kernel warning and potentially other undefined behavior.

Recommendations Update the Linux kernel to version 6.1.30-syzkaller or later.

Exploit

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

CWE-456

Identificadores relacionados

BDU:2026-03947

CVE-2023-53312

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Produtos afetados

Astra Linux

Linux Kernel

Suse

Referências · 1406

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53312.json · Exploit
• https://bugzilla.suse.com/1252062 · Nota
• https://bugzilla.suse.com/1248166 · Nota
• https://suse.com/security/cve/CVE-2023-53487 · Nota
• https://suse.com/security/cve/CVE-2025-39678 · Nota
• https://bugzilla.suse.com/1252060 · Nota
• https://bugzilla.suse.com/1250319 · Nota
• https://suse.com/security/cve/CVE-2025-40043 · Nota
• https://suse.com/security/cve/CVE-2023-53352 · Nota
• https://bugzilla.suse.com/1249538 · Nota
• https://suse.com/security/cve/CVE-2023-53510 · Nota
• https://bugzilla.suse.com/1251081 · Nota
• https://bugzilla.suse.com/1249901 · Nota
• https://suse.com/security/cve/CVE-2025-38185 · Nota
• https://bugzilla.suse.com/1250024 · Nota