PT-2025-37549 · Linux+5 · Linux Kernel+5

Published 2023-11-07 · Updated 2026-04-14 · CVE-2023-53185

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A malicious USB device can construct a service connection response message targeting ENDPOINT0, which is reserved for HTC CTRL RSVD SVC and should not be modified. This allows the device to potentially overwrite attributes of ENDPOINT0. The issue was discovered by Linux Verification Center (linuxtesting.org) using Syzkaller.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

ALSA-2025_16880

BDU:2026-05868

CESA-2023_7077

CVE-2023-53185

OESA-2025-2659

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

RHSA-2025:21051

RHSA-2025:21083

RHSA-2025:21091

RHSA-2025:21128

RHSA-2025:21136

SUSE-SU-2025:03600-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4189-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 2168

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53185.json · Exploit
• https://ubuntu.com/security/CVE-2023-53185 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53446 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53676 · Security Note
• https://git.kernel.org/stable/c/6a444dffb75238c47d2d852f12cf53f12ad2cba8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50482 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50484 · Security Note
• https://git.kernel.org/stable/c/09740fa9827cfbaf23ecd041e602a426f99be888 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50551 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53675 · Security Note
• https://git.kernel.org/stable/c/4dc3560561a08842b4a4c07ccc5a90e5067dbb5b · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50552 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50352 · Security Note