PT-2025-53994 · Linux+1 · Linux Kernel+1

CVE-2023-54165 · Publicado 2025-12-30 · Atualizado 2026-01-01

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.19.0-0 fbk3 rc3 hoangnhatpzsdynshrv41 10870 g85a9558a25de

Description The Linux kernel contains an issue within the zsmalloc subsystem related to the timing of Least Recently Used (LRU) list updates. The LRU update is performed at object mapping time instead of allocation time, which can lead to a crash under concurrent memory store and reclaim operations. This occurs when a store operation and a reclaim operation interleave, specifically during zswap frontswap store() and zs reclaim page(), potentially causing a list del corruption.

Recommendations Update to Linux kernel version 5.19.0-0 fbk3 rc3 hoangnhatpzsdynshrv41 10870 g85a9558a25de or a later version.

Exploit

Identificadores relacionados

CVE-2023-54165

RHSA-2024:9315

Produtos afetados

Linux Kernel

Red Hat

Referências · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54165.json · Exploit
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Nota
• https://ubuntu.com/security/CVE-2023-54165 · Aviso do Fabricante
• https://lore.kernel.org/linux-cve-announce/2025123019-CVE-2023-54165-1362@gregkh/T · Nota
• https://osv.dev/vulnerability/BELL-CVE-2023-54165 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-54165 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-54165 · Aviso do Fabricante
• https://git.kernel.org/stable/c/d461aac924b937bcb4fd0ca1242b3ef6868ecddd · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54165 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-54165 · Nota de Segurança
• https://git.kernel.org/linus/d461aac924b937bcb4fd0ca1242b3ef6868ecddd · Nota
• https://twitter.com/CVEnew/status/2006861519976325624 · Publicação no Twitter
• https://git.kernel.org/stable/c/e95adf7486f2cb5f1bb303113ca30460951923e9 · Nota
• https://docs.bell-sw.com/security/cves/CVE-2023-54165 · Nota