PT-2025-37647 · Linux+5 · Linux Kernel+5

Published 2025-09-15 · Updated 2026-04-14 · CVE-2023-53205

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in the KVM component related to a race condition when accessing the physical CPU number in the diag 9c handler. The vulnerability occurs because the target CPU value can change between the initial check and its subsequent use, potentially leading to out-of-bound accesses to CPU arrays. A local variable is used to hold the physical target CPU to prevent this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

BDU:2026-05872

CVE-2023-53205

RHSA-2023:6583

RHSA-2024:3138

SUSE-SU-2025:03600-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 2009

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53205.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53205 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05872 · Security Note
• https://git.kernel.org/stable/c/a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53205 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://git.kernel.org/stable/c/86bfb18bad60fc468e5f112cbbd918462a8dd435 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53205 · Vendor Advisory
• https://git.kernel.org/stable/c/0bc380beb78aa352eadbc21d934dd9606fcee808 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53205 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53205 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://git.kernel.org/stable/c/dc7e0192c470a53d847c79a2796f9ac429477a26 · Patch