PT-2025-13344 · Linux+2 · Linux Kernel+2

Published 2023-01-19 · Updated 2025-10-29 · CVE-2023-52998

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue was related to the use of page pool release page when freeing rx buffers, which only unmaps the page and does not recycle it. This could lead to a memory leak after hundreds of down/up cycles of the eth0 interface. The page pool put full page function should be used instead, as it attempts to recycle the page if the page reference count equals 1.

Recommendations To resolve this issue, use the page pool put full page function when freeing rx buffers instead of page pool release page. This change should prevent the memory leak and ensure proper page recycling.

Note: The provided information does not specify the exact versions of the Linux kernel that are affected or the versions that contain the fix. Therefore, it is recommended to consult the official Linux kernel documentation or release notes for more detailed information on affected and patched versions.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06262

CVE-2023-52998

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52998.json · Exploit
• https://git.kernel.org/stable/c/554484a34e985a307756ee4794e60be31e3db2e5 · Patch
• https://bdu.fstec.ru/vul/2025-06262 · Security Note
• https://git.kernel.org/stable/c/e38553bdc377e3e7a6caa9dd9770d8b644d8dac3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-52998 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-52998 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52998 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52998 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52998 · Security Note
• https://ubuntu.com/security/CVE-2023-52998 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-34035 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52998 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52998 · Vendor Advisory
• https://redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-kernel-lt-280525/?sphrase_id=1000202 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note