PT-2025-18799 · Linux+3 · Linux Kernel+3

Published 2023-03-07 · Updated 2026-01-28 · CVE-2023-53035

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel-infoleak issue has been identified in the Linux kernel, specifically in the nilfs2 file system. The nilfs ioctl wrap copy() function, which handles ioctl commands, may copy uninitialized buffer regions to user space memory for read-only commands. This occurs when the element size of the user space metadata is larger than the size of the metadata element on the file system side. The issue can be detected by KMSAN-enabled kernels.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-05364

CVE-2023-53035

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 456

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53035.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53035 · Security Note
• https://git.kernel.org/stable/c/a94932381e8dae4117e9129b3c1282e18aa97b05 · Patch
• https://ubuntu.com/security/CVE-2023-53035 · Vendor Advisory
• https://git.kernel.org/stable/c/5f33b042f74fc9662eba17f4cd19b07d84bbc6c5 · Patch
• https://git.kernel.org/stable/c/003587000276f81d0114b5ce773d80c119d8cb30 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53035 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53035 · Vendor Advisory
• https://git.kernel.org/stable/c/9c5034e9a0e03db8d5e9eabb176340259b5b97e4 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5bb105cc72beb9d51bf12f5c657336d2d35bdc5d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05364 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53035 · Vendor Advisory