PT-2025-18825 · Linux+2 · Linux Kernel+2

Published 2023-03-02 · Updated 2026-01-28 · CVE-2023-53061

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A refcount leak in the smb2 open() function has been identified. This issue occurs when memory allocation fails, causing the reference count of acls to leak. The problem is resolved by adding the missing posix acl release().

Recommendations For the affected Linux kernel versions, consider applying the fix that includes the addition of posix acl release() to the smb2 open() function to prevent refcount leaks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-911

Related Identifiers

BDU:2025-06765

CVE-2023-53061

OESA-2025-1570

OESA-2025-1571

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 36

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53061.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-37940 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53146 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37925 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49784 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37980 · Security Note
• https://git.kernel.org/stable/c/303f8e58cc3ace744801dcdcabfc06ffc72ed62d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-57876 · Security Note
• https://git.kernel.org/stable/c/2624b445544ffc1472ccabfb6ec867c199d4c95c · Patch
• https://git.kernel.org/stable/c/a22c49a05e5e7aa2c414fbc42c49c4c01a5c9a78 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-3238 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53061 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53061 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2025-1570 · Vendor Advisory
• https://git.kernel.org/stable/c/c33344b7972225b232966f95d31f6312dcc6273d · Patch