PT-2025-18854 · Linux+5 · Linux Kernel+5

Published 2023-11-07 · Updated 2026-01-28 · CVE-2023-53090

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an illegal memory access in the Linux kernel, specifically in the kfd wait on events() function. The kfd event waiter structure is allocated but not properly initialized, leading to a system crash when an exception occurs. The crash log indicates a problem with memory access, resulting in a system crash. The estimated number of potentially affected devices worldwide is not available.

Recommendations To resolve the issue, allocate the kfd event waiter structure with kcalloc and remove redundant 0-initialization and a redundant loop condition check. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_16880

CESA-2023_7077

CVE-2023-53090

OESA-2025-1513

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:02334-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

SUSE-SU-2025_02334-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 706

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53090.json · Exploit
• https://git.kernel.org/stable/c/2fece63b55c5d74cd6f5de51159e2cde37e10555 · Patch
• https://git.kernel.org/stable/c/d9923e7214a870b312bf61f6a89c7554d0966985 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:02334-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53090 · Vendor Advisory
• https://git.kernel.org/stable/c/6936525142a015e854d0a23e9ad9ea0a28b3843d · Patch
• https://git.kernel.org/stable/c/61f306f8df0d5559659c5578cf6d95236bcdcb25 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49771 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49111 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53090 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53090 · Vendor Advisory
• https://git.kernel.org/stable/c/5a3fb3b745af0ce46ec2e0c8e507bae45b937334 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53116 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:02262-1 · Vendor Advisory