PT-2025-18823 · Linux+4 · Linux Kernel+4

Published 2023-03-24 · Updated 2026-01-28 · CVE-2023-53059

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel data leak issue has been identified, allowing potential access to kernel page data by providing a larger insize in the cros ec command struct when invoking EC host commands. This issue can be exploited to leak sensitive information. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2025-06020

CVE-2023-53059

RHSA-2024:9315

RHSA-2024_9315

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 454

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53059.json · Exploit
• https://ubuntu.com/security/CVE-2023-53059 · Vendor Advisory
• https://git.kernel.org/stable/c/a0d8644784f73fa39f57f72f374eefaba2bf48a0 · Patch
• https://git.kernel.org/stable/c/13493ad6a220cb3f6f3552a16b4f2753a118b633 · Patch
• https://git.kernel.org/stable/c/ebea2e16504f40d2c2bac42ad5c5a3de5ce034b4 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53059 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53059 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53059 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://git.kernel.org/stable/c/eab28bfafcd1245a3510df9aa9eb940589956ea6 · Patch
• https://git.kernel.org/stable/c/f86ff88a1548ccf5a13960c0e7625ca787ea0993 · Patch
• https://git.kernel.org/stable/c/b20cf3f89c56b5f6a38b7f76a8128bf9f291bbd3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53059 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory