PT-2025-13357 · Linux+2 · Linux Kernel+2

Published 2025-01-18 · Updated 2025-06-02 · CVE-2023-53011

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the implementation of the dwmac5 driver, where not all safety features were enabled by default for certain platforms. This resulted in a NULL pointer dereference when the automotive safety package bit is set in the hardware features register. The problem occurred because only specific platforms had software support for safety features, and for other platforms, the safety feature callback was called without a defined safety feat cfg structure.

Recommendations To resolve the issue, go back to the original behavior and enable all safety features by default if the automotive safety package is supported in hardware, unless a safety feat cfg is provided that specifies a subset of features for a particular platform. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-06331

CVE-2023-53011

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53011.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-53011 · Vendor Advisory
• https://git.kernel.org/stable/c/fdfc76a116b5e9d3e98e6c96fe83b42d011d21d4 · Patch
• https://git.kernel.org/stable/c/120b8e527e07c65de7f2b9018dcd9d17e66f2427 · Patch
• https://ubuntu.com/security/CVE-2023-53011 · Vendor Advisory
• https://git.kernel.org/stable/c/aebf7e62708ba706ee7bf484c9023b15c214e92a · Patch
• https://cve.org/CVERecord?id=CVE-2023-53011 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53011 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53011 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53011 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06331 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53011 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2023-53011 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note