PT-2025-37533 · Linux+2 · Linux Kernel+2

Published 2025-09-15 · Updated 2026-04-14 · CVE-2023-53169

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to resource control (resctrl) where the staged config[] array in rdt domain is not properly cleared before and after use. This can lead to stale values within the array, potentially causing an MSR (Model Specific Register) access error during the creation of new resource control groups. Specifically, the issue occurs when creating a new resource control group, where an invalid register may be accessed due to incorrect CLOSID translation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-457

Related Identifiers

BDU:2026-05935

CVE-2023-53169

Affected Products

Astra Linux

Linux Kernel

Red Os

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53169.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53169 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53169 · Vendor Advisory
• https://git.kernel.org/stable/c/8ecc60ef9318f0d533b866fa421858cc185bccfc · Patch
• https://osv.dev/vulnerability/CVE-2023-53169 · Vendor Advisory
• https://git.kernel.org/stable/c/0424a7dfe9129b93f29b277511a60e87f052ac6b · Patch
• https://cve.org/CVERecord?id=CVE-2023-53169 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53169 · Security Note
• https://git.kernel.org/stable/c/3fc5941ecc31a495b6b84b465f36155009db99b5 · Patch
• https://ubuntu.com/security/CVE-2023-53169 · Vendor Advisory
• https://git.kernel.org/stable/c/86db319d25db70cf4af4557e05f6fa6f39c70003 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53169 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05935 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53169 · Vendor Advisory
• https://twitter.com/CVEnew/status/1967597801778688209 · Twitter Post