PT-2025-13346 · Linux+3 · Linux Kernel+3

Published 2025-01-19 · Updated 2025-10-30 · CVE-2023-53000

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential issue has been resolved in the Linux kernel related to netlink attributes. The nla type(nla) function is used to parse and validate netlink attributes, and the type variable is then used as an array index. This could potentially be used as a Spectre v1 gadget, allowing malicious users to leak kernel memory content. The array index nospec() function can be used to prevent this. An audit is needed to ensure all netlink uses are properly validated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Validation of Array Index

Memory Leak

Weakness Enumeration

CWE-129

CWE-401

Related Identifiers

BDU:2025-06362

CVE-2023-53000

OPENSUSE-SU-2025_1195-1

OPENSUSE-SU-2025_1263-1

SUSE-SU-2025:02099-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_02099-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1518

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53000.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:1263-1 · Vendor Advisory
• https://git.kernel.org/stable/c/992e4ff7116a77968039277b5d6aaa535c2f2184 · Patch
• https://git.kernel.org/stable/c/3e5082b1c66c7783fbcd79b5b178573230e528ff · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53000 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53000 · Vendor Advisory
• https://git.kernel.org/stable/c/539ca5dcbc91134bbe2c45677811c31d8b030d2d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53000 · Vendor Advisory