PT-2025-13306 · Linux+3 · Linux Kernel+3

Published 2025-03-27 · Updated 2025-05-29 · CVE-2023-52930

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential double-free issue in the Linux kernel has been identified. This issue occurs when multiple threads in userspace race to set the tiling to I915 TILING NONE using the I915 GEM SET TILING function, which could trigger a double free of the bit 17 bitmask or conversely leak memory on the transition to tiled. The allocation and free'ing of the bitmask have been moved within the section protected by the obj lock to resolve this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Double Free

Weakness Enumeration

CWE-401

CWE-415

Related Identifiers

BDU:2025-06311

CVE-2023-52930

OPENSUSE-SU-2025_1195-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1346

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52930.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://bdu.fstec.ru/vul/2025-06311 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52930 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52930 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52930 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52930 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-52930 · Vendor Advisory
• https://git.kernel.org/stable/c/7057a8f126f14f14b040faecfa220fd27c6c2f85 · Patch