PT-2025-13353 · Linux+3 · Linux Kernel+3

Published 2025-01-04 · Updated 2025-06-02 · CVE-2023-53007

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns the Linux kernel's tracing functionality, specifically the trace printk() function. Currently, trace printk() can be used as soon as early trace init() is called from start kernel(). However, if a crash occurs and "ftrace dump on oops" is set on the kernel command line, the output may not be useful due to the trace printk() event not being registered yet. To address this, the trace printk() event and other ftrace events are registered at the same time that trace printk() can be used, making it more useful in case of a crash before early initcall().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-06336

CVE-2023-53007

OESA-2025-1370

OPENSUSE-SU-2025_1195-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1520

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/cve_2022_0995_watch_queue.rb · Exploit
• 🔥 https://github.com/qazbnm456/awesome-cve-poc/blob/master/CVE-2017-5753.md · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53007.json · Exploit
• 🔥 https://github.com/Bonfee/CVE-2022-0995 · Exploit
• 🔥 https://github.com/TurtleARM/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/H4K6/CVE-2023-0179-PoC · Exploit
• 🔥 https://github.com/EdwardOwusuAdjei/Spectre-PoC · Exploit
• https://git.kernel.org/stable/c/198c83963f6335ca6d690cff067679560f2a3a22 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49337 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21785 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49416 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49482 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-21722 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53007 · Vendor Advisory