PT-2025-13349 · Linux+2 · Linux Kernel+2

Published 2025-01-18 · Updated 2025-06-02 · CVE-2023-53003

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free bug has been identified in the Linux kernel. The issue arises when the memory for llcc driv data is allocated by the LLCC driver and then passed as private driver info to the EDAC core. When the qcom edac driver is released, this memory gets freed. However, upon the qcom edac driver being probed again, it attempts to use the freed data, leading to the bug. The solution involves referencing llcc driv data using the platform data pointer in the qcom edac driver instead of passing it as pvt info.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06360

CVE-2023-53003

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53003.json · Exploit
• https://git.kernel.org/stable/c/66e10d5f399629ef7877304d9ba2b35d0474e7eb · Patch
• https://git.kernel.org/stable/c/bff5243bd32661cf9ce66f6d9210fc8f89bda145 · Patch
• https://git.kernel.org/stable/c/76d9ebb7f0bc10fbc78b6d576751552edf743968 · Patch
• https://git.kernel.org/stable/c/6f0351d0c311951b8b3064db91e61841e85b2b96 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53003 · Security Note
• https://ubuntu.com/security/CVE-2023-53003 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53003 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53003 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53003 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53003 · Vendor Advisory
• https://git.kernel.org/stable/c/977c6ba624f24ae20cf0faee871257a39348d4a9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53003 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53003 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06360 · Security Note