PT-2025-13331 · Linux+3 · Linux Kernel+3

Published 2023-01-16 · Updated 2025-09-29 · CVE-2023-52985

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, related to the arm64 architecture, specifically the imx8mm-verdin device tree. The issue occurs when suspending the system using either freeze or memory state, causing the fec driver to attempt to power down the ethernet phy, leading to a kernel crash. The call trace indicates the error occurs in the phy error function. To address this, the feature of powering down the ethernet phy has been disabled due to the lack of functionality in the phy subsystem to handle this operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

BDU:2025-06272

CVE-2023-52985

RHSA-2024:2394

RHSA-2024_2394

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52985.json · Exploit
• https://bdu.fstec.ru/vul/2025-06272 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-52985 · Security Note
• https://git.kernel.org/stable/c/39c95d0c357d7ef76aea958c1bece6b24f9b2e7e · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52985 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52985 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52985 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52985 · Security Note
• https://ubuntu.com/security/CVE-2023-52985 · Vendor Advisory
• https://git.kernel.org/stable/c/0bdd5a7b517f16fdffc444be6516c45788548d08 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-52985 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52985 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-52985 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-280525/?sphrase_id=1000202 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note