PT-2025-18811 · Linux+3 · Linux Kernel+3

Published 2023-02-28 · Updated 2026-01-28 · CVE-2023-53047

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential race condition exists in the amdtee open session() function, which may lead to a use-after-free issue. This occurs when amdtee close session() closes a session after sess->sess mask is set but before sess->session info[i] is set, causing the sess data structure to be released. This can result in a kernel panic when sess is accessed within amdtee open session(). The issue is resolved by setting the sess->sess mask bit as the last step in amdtee open session().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Use After Free

Weakness Enumeration

CWE-362

CWE-416

Related Identifiers

ALSA-2025_16880

BDU:2025-06785

CVE-2023-53047

RHSA-2024:2394

RHSA-2024_2394

RHSA-2025:14003

RHSA-2025:14005

RHSA-2025:14744

RHSA-2025:14749

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53047.json · Exploit
• https://git.kernel.org/stable/c/f8502fba45bd30e1a6a354d9d898bc99d1a11e6d · Patch
• https://git.kernel.org/stable/c/f632a90f8e39db39b322107b9a8d438b826a7f4f · Patch
• https://ubuntu.com/security/CVE-2023-53047 · Vendor Advisory
• https://git.kernel.org/stable/c/b3ef9e6fe09f1a132af28c623edcf4d4f39d9f35 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53047 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53047 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53047 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53047 · Vendor Advisory
• https://git.kernel.org/stable/c/02b296978a2137d7128151c542e84dc96400bc00 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53047 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53047 · Security Note
• https://bdu.fstec.ru/vul/2025-06785 · Security Note
• https://git.kernel.org/stable/c/a63cce9393e4e7dbc5af82dc87e68cb321cb1a78 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53047 · Vendor Advisory