PT-2025-37521 · Linux+5 · Linux Kernel+5

Published 2023-06-22 · Updated 2026-02-12 · CVE-2023-53148

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the igb module where the igb down function can hang when a Thunderbolt hub connected to Ethernet and a display via USB Type-C is unexpectedly removed. This occurs because the igb down function is called multiple times during the removal process, leading to a block at napi synchronize. Specifically, the issue arises from non-fatal PCIE errors triggering an unnecessary slot reset request, causing the Ethernet connection to break down. The call trace includes functions such as schedule, schedule, igb down, igb close, igb close, and igb remove.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Improper Resource Release

Weakness Enumeration

CWE-415

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-02187

CESA-2024_3138

CVE-2023-53148

RHSA-2024:2394

RHSA-2024:3138

RHSA-2024_2394

RHSA-2024_3138

SUSE-SU-2025:03600-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

SUSE-SU-2026:0473-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Igb

References · 1907

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53148.json · Exploit
• https://git.kernel.org/stable/c/fa92c463eba75dcedbd8d689ffdcb83293aaa0c3 · Patch
• https://git.kernel.org/stable/c/41f63b72a01c0e0ac59ab83fd2d921fcce0f602d · Patch
• https://git.kernel.org/stable/c/c2312e1d12b1c3ee4100c173131b102e2aed4d04 · Patch
• https://git.kernel.org/stable/c/c9f56f3c7bc908caa772112d3ae71cdd5d18c257 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://git.kernel.org/stable/c/124e39a734cb90658b8f0dc110847bbfc6e33792 · Patch
• https://git.kernel.org/stable/c/39695e87d86f0e7d897fba1d2559f825aa20caeb · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53148 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53148 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53148 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02187 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53148 · Vendor Advisory