PT-2025-13315 · Linux+3 · Linux Kernel+3

Published 2024-04-30 · Updated 2026-05-26 · CVE-2023-52939

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference issue has been resolved in the Linux kernel. The problem occurred when hwpoison forcibly uncharged a LRU hwpoisoned page, potentially resulting in a NULL folio memcg, which could lead to a NULL pointer dereference in mem cgroup track foreign dirty slowpath(). To fix this, the code now avoids recording foreign writebacks for folio memcg when it is NULL in mem cgroup track foreign dirty().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

AZL-60367

CVE-2023-52939

OPENSUSE-SU-2025_1195-1

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Debian

Linux Kernel

Red Hat

Suse

References · 1332

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52939.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-52939 · Vendor Advisory
• https://git.kernel.org/stable/c/ac86f547ca1002aec2ef66b9e64d03f45bbbfbb9 · Patch
• https://osv.dev/vulnerability/AZL-60367 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52939 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-52939 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52939 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52939 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52939 · Vendor Advisory
• https://git.kernel.org/stable/c/b79ba5953f6fdc5559389ad415620bffc24f024b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1195-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52939 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52939 · Security Note