PT-2025-13369 · Linux+3 · Linux Kernel+3

Published 2025-01-11 · Updated 2025-06-02 · CVE-2023-53023

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue has been identified in the Linux kernel, specifically in the local cleanup() function. This issue occurs when the nfc daemon is killed after detaching an nfc device, leading to a double-free scenario. The problem arises from the local cleanup() function being called twice, once from nfc llcp unregister device() and again from local release(), resulting in the local->rx pending being freed twice. This vulnerability was discovered using a modified version of syzkaller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-06332

CVE-2023-53023

OESA-2025-1465

OPENSUSE-SU-2025_1195-1

SUSE-SU-2025:01600-1

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1498

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53023.json · Exploit
• https://git.kernel.org/stable/c/a59cdbda3714e11aa3ab579132864c4c8c6d54f9 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53023 · Vendor Advisory
• https://git.kernel.org/stable/c/4bb4db7f3187c6e3de6b229ffc87cdb30a2d22b6 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-47670 · Security Note
• https://git.kernel.org/stable/c/d3605282ec3502ec8847915eb2cf1f340493ff79 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49084 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49429 · Security Note
• https://ubuntu.com/security/CVE-2023-53023 · Vendor Advisory
• https://git.kernel.org/stable/c/7f129927feaf7c10b1c38bbce630172e9a08c834 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53023 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01600-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49626 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21762 · Security Note