PT-2025-13361 · Linux+5 · Linux Kernel+5

Published 2023-11-07 · Updated 2025-09-29 · CVE-2023-53015

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the HID betop component in the Linux kernel. Specifically, the betopff init() function checks the total sum of report counts for each report field, but hid betopff play() expects 4 report fields. A device with an output report having one field and 4 report counts could pass the check, leading to a kernel crash due to a NULL pointer dereference in hid betopff play().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2025-06351

CESA-2023_7077

CVE-2023-53015

OESA-2025-1408

OPENSUSE-SU-2025_1195-1

OPENSUSE-SU-2025_1263-1

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

RHSA-2024:0412

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1194-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025:1263-1

SUSE-SU-2025:1293-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

SUSE-SU-2025_1263-1

SUSE-SU-2025_1293-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 1530

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53015.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-49491 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53015 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49085 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53015 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49100 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49711 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://git.kernel.org/stable/c/28fc6095da22dc88433d79578ae1c495ebe8ca43 · Patch
• https://ubuntu.com/security/CVE-2023-53015 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53015 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1293-1 · Vendor Advisory
• https://git.kernel.org/stable/c/7317326f685824c7c29bd80841fd18041af6bb73 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49374 · Security Note