PT-2025-13368 · Linux+2 · Linux Kernel+2

Published 2025-01-12 · Updated 2025-06-02 · CVE-2023-53022

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A deadlock vulnerability has been identified in the Linux kernel, specifically in the enetc tx onestep tstamp() function. This issue occurs when the netif tx lock() is held while an interrupt happens, and the NET TX softirq is scheduled, causing a deadlock. The vulnerability can be triggered when the enetc tx onestep tstamp() work item runs in process context with softirqs enabled, allowing it to be interrupted by a softirq.

Recommendations To resolve this issue, use netif tx lock bh(), which blocks softirqs from running, preventing the deadlock. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-833

CWE-667

Related Identifiers

BDU:2025-06333

CVE-2023-53022

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53022.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-53022 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53022 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53022 · Vendor Advisory
• https://git.kernel.org/stable/c/8232e5a84d25a84a5cbda0f241a00793fb6eb608 · Patch
• https://git.kernel.org/stable/c/e893dced1a18e77b1262f5c10169413f0ece0da7 · Patch
• https://git.kernel.org/stable/c/3c463721a73bdb57a913e0d3124677a3758886fc · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53022 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53022 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06333 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53022 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://t.me/cvetracker/20080 · Telegram Post