PT-2025-18904 · Linux+4 · Linux Kernel+4

Published

2024-04-30

·

Updated

2025-09-29

·

CVE-2023-53140

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the race condition between unloading and reloading kernel modules.
Description A race condition in the Linux kernel has been resolved. The issue was caused by a bug introduced in 2009 and was fixed by removing the /proc/scsi/${proc name} directory earlier. This fix resolves a kernel warning that occurred when the scsi/scsi debug proc dir entry was already registered. The warning was accompanied by a call trace that included functions such as proc register, proc mkdir, and scsi proc hostdir add.
Recommendations For Linux kernel versions prior to the fixed version, consider updating to a version that includes the fix for the race condition to prevent the kernel warning and potential issues related to the scsi/scsi debug proc dir entry. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025_16880
CESA-2024_3138
CVE-2023-53140
RHSA-2024:2394
RHSA-2024:3138
RHSA-2024_2394
RHSA-2024_3138
SUSE-SU-2025:01918-1
SUSE-SU-2025:01966-1
SUSE-SU-2025:01983-1
SUSE-SU-2025:02173-1
SUSE-SU-2025:02262-1
SUSE-SU-2025:2173-1
SUSE-SU-2025_01983-1
SUSE-SU-2025_02173-1
SUSE-SU-2025_02262-1

Affected Products

Astra Linux
Centos
Linux Kernel
Red Hat
Suse