PT-2025-13341 · Linux+2 · Linux Kernel+2

Published 2023-01-16 · Updated 2025-05-28 · CVE-2023-52995

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fix of the instruction simulation of JALR

Description The issue is related to the instruction simulation of JALR in the Linux kernel, specifically when setting a kprobe at 'jalr 1140(ra)' of vfs write. This results in a crash due to the kernel's inability to handle access to user memory without uaccess routines. The crash occurs because the rs1 and rd might be the same, requiring the target address to be obtained from rs1 followed by updating rd.

Recommendations For Linux kernel versions prior to the fix, consider applying the patch that fixes the instruction simulation of JALR to resolve the issue. As a temporary workaround, avoid setting kprobes at 'jalr 1140(ra)' of vfs write until the patch is applied.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-188

CWE-362

Related Identifiers

BDU:2025-06268

CVE-2023-52995

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52995.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-52995 · Vendor Advisory
• https://git.kernel.org/stable/c/ca0254998be4d74cf6add70ccfab0d2dbd362a10 · Patch
• https://git.kernel.org/stable/c/614471b7f7cd28a2c96ab9c90b37471c82258ffb · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52995 · Vendor Advisory
• https://git.kernel.org/stable/c/f4c8fc775fcbc9e9047b22671c55ca18f9a127d4 · Patch
• https://ubuntu.com/security/CVE-2023-52995 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52995 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52995 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52995 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52995 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-52995 · Security Note
• https://bdu.fstec.ru/vul/2025-06268 · Security Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-280525/?sphrase_id=1000202 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note