PT-2025-18830 · Linux+4 · Linux Kernel+4

Published 2023-03-16 · Updated 2026-01-28 · CVE-2023-53066

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved. The issue is related to the qed/qed sriov component, where a NULL dereference from qed iov get vf info could occur. The fix involves guarding against this issue by ensuring the info returned by the helper is valid before using it. This vulnerability was found by the Linux Verification Center using the SVACE static analysis tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-05789

CVE-2023-53066

OESA-2025-1726

RHSA-2025:6966

RHSA-2025_6966

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:01983-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_01983-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Red Os

Suse

References · 675

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53066.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49917 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53066 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50222 · Security Note
• https://git.kernel.org/stable/c/39c3b9dd481c3afce9439b29bafe00444cb4406b · Patch
• https://git.kernel.org/stable/c/7bd0037822fd04da13721f77a42ee5a077d4c5fb · Patch
• https://git.kernel.org/stable/c/e42d3bde4ec03c863259878dddaef5c351cca7ad · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53066 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50080 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-49982 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53053 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38058 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01983-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02173-1 · Vendor Advisory