PT-2025-37552 · Unknown+6 · Openvswitch+6

Published 2025-09-15 · Updated 2026-04-14 · CVE-2023-53188

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Linux kernel's Open vSwitch (OVS) implementation related to port output. Specifically, the issue occurs when a network namespace is deleted while packets are still being sent to an OVS vport. This can lead to a CPU being stuck in an infinite loop within the skb tx hash function if dev->real num tx queues is zero. The vulnerability arises because the removal of RX handlers doesn't prevent packets from being sent to the device during the unregistration process, and the background task responsible for vport deletion may not complete before packets are processed. The issue can be triggered by sending a large number of parallel requests to a server within a network namespace and simultaneously deleting the namespace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-05936

CVE-2023-53188

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2025:4189-1

Affected Products

Astra Linux

Centos

Linux Kernel

Openvswitch

Red Hat

Red Os

Suse

References · 312

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53188.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-53188 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53188 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53188 · Vendor Advisory
• https://git.kernel.org/stable/c/9b0dd09c1ceb35950d2884848099fccc9ec9a123 · Patch
• https://git.kernel.org/stable/c/56252da41426f3d01957456f13caf46ce670ea29 · Patch
• https://git.kernel.org/stable/c/066b86787fa3d97b7aefb5ac0a99a22dad2d15f8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53188 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53188 · Security Note
• https://git.kernel.org/stable/c/644b3051b06ba465bc7401bfae9b14963cbc8c1c · Patch
• https://git.kernel.org/stable/c/284be5db6c8d06d247ed056cfc448c4f79bbb16c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53188 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53188 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53188 · Vendor Advisory