PT-2025-13374 · Linux+5 · Linux Kernel+5

Published 2023-11-07 · Updated 2025-09-29 · CVE-2023-53028

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the reverted commit 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293.

Description A memory leak issue in the Linux kernel has been resolved. The issue was related to the ieee80211 if add() function. A general protection fault was reported, likely due to a non-canonical address. The issue was identified by syzbot, which reported a null-ptr-deref in a specific range. The vulnerability was exploited in a test environment, causing a crash.

Recommendations As a temporary workaround, consider disabling the ieee80211 if add() function until a patch is available. Update to a version of the Linux kernel that includes the fix for the reverted commit 13e5afd3d773c6fc6ca2b89027befaaaa1ea7293.

Exploit

Fix

DoS

Memory Leak

NULL Pointer Dereference

Weakness Enumeration

CWE-401

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2025-06338

CESA-2023_7077

CVE-2023-53028

OPENSUSE-SU-2025_1195-1

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:1176-1

SUSE-SU-2025:1183-1

SUSE-SU-2025:1195-1

SUSE-SU-2025:1241-1

SUSE-SU-2025_1195-1

SUSE-SU-2025_1241-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 1337

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53028.json · Exploit
• https://git.kernel.org/stable/c/effecd8d116d3d3a28b4f628e61bba8d318fdfcf · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53028 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1183-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1176-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53028 · Vendor Advisory
• https://git.kernel.org/stable/c/80f8a66dede0a4b4e9e846765a97809c6fe49ce5 · Patch
• https://git.kernel.org/stable/c/71e5cd1018d345e649e63f74a56c1897f99db7e9 · Patch
• https://git.kernel.org/stable/c/982c8b1e95c088f5d8f65967ec25be66e961401c · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53028 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1241-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:1195-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53028 · Security Note
• https://ubuntu.com/security/CVE-2023-53028 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53028 · Security Note