PT-2025-37545 · Linux+3 · Linux Kernel+3

Published 2023-07-15 · Updated 2026-04-14 · CVE-2023-53181

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The dma resv get fences() function in the Linux kernel may leak memory when krealloc array() fails during fence iteration. This occurs because the previously allocated array is not freed, and the returned *fences pointer may point to freed memory, potentially leading to access issues for callers. The issue is resolved by manually freeing the old array and clearing the *fences and *num fences variables.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-834

Related Identifiers

BDU:2026-02040

CVE-2023-53181

RHSA-2022:7683

RHSA-2022:8267

RHSA-2024:2394

SUSE-SU-2025:03600-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Linux Kernel

Red Os

Suse

References · 1990

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53181.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-53181 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://git.kernel.org/stable/c/05abb3be91d8788328231ee02973ab3d47f5e3d2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53181 · Vendor Advisory
• https://git.kernel.org/stable/c/819656cc03dec7f7f7800274dfbc8eb49f888e9f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53181 · Vendor Advisory
• https://git.kernel.org/stable/c/19e7b9f1f7e1cb92a4cc53b4c064f7fb4b1f1983 · Patch
• https://osv.dev/vulnerability/CVE-2023-53181 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53181 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02040 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03600-1 · Vendor Advisory