PT-2025-37659 · Linux+2 · Linux Kernel+2

Published 2023-01-01 · Updated 2026-05-26 · CVE-2023-53218

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where a process waiting for an rxrpc call could be interrupted, leading to subsequent sendmsg() calls failing with an EBUSY error until an assignment is made. The fix allows the call to be aborted without failing due to EBUSY. This occurs when sendmsg() creates an rxrpc call and queues it while waiting for a connection and channel assignment, as the encrypted DATA packet content includes a summary of the connection parameters.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

ALSA-2025_16880

AZL-71227

BDU:2026-05874

CVE-2023-53218

ECHO-138E-C31E-0A5E

RHSA-2023:6583

RHSA-2023_6583

Affected Products

Debian

Linux Kernel

Red Hat

References · 25

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53218.json · Exploit
• https://git.kernel.org/stable/c/7161cf61c64e9e9413d790f2fa2b9dada71a2249 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53218 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53218 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53218 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53218 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-71227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53218 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53218 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53218 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-53218 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53218 · Security Note
• https://git.kernel.org/stable/c/876d96faacbc407daf4978d7ec95051b68f5344a · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53218 · Vendor Advisory
• https://git.kernel.org/stable/c/0eb362d254814ce04848730bf32e75b8ee1a4d6c · Patch