PT-2025-37665 · Ext4+4 · Ext4+4

Published 2023-01-27 · Updated 2025-09-29 · CVE-2023-53224

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue related to a function prototype mismatch within the ext4 module. Specifically, the ext4 feat ktype function was setting the "release" handler to kfree, which has an incompatible function prototype. This incompatibility can lead to kernel panics or thread termination when kernel control flow integrity (kCFI) is enabled, potentially mitigating return-oriented programming (ROP) attacks. The issue was identified using Clang's -Wcast-function-type-strict flag and occurs during module unloading when ext4 is loaded as a module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-670

CWE-401

Related Identifiers

ALSA-2025_16880

BDU:2026-06000

CESA-2024_3138

CVE-2023-53224

RHSA-2023:6583

RHSA-2023_6583

RHSA-2024:3138

RHSA-2024_3138

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Ext4

References · 28

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53224.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53224 · Vendor Advisory
• https://git.kernel.org/stable/c/1ba10d3640e9783dad811fe4e24d55465c37c64d · Patch
• https://git.kernel.org/stable/c/94d8de83286fb1827340eba35b61c308f6b46ead · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53224 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53224 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-06000 · Security Note
• https://git.kernel.org/stable/c/99e3fd21f8fc975c95e8cf76fbf6a3d2656f8f71 · Patch
• https://git.kernel.org/stable/c/c98077f7598a562f51051eec043be0cb3e1b1b5e · Patch
• https://git.kernel.org/stable/c/118901ad1f25d2334255b3d50512fa20591531cd · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53224 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53224 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53224 · Vendor Advisory
• https://git.kernel.org/stable/c/2b69cdd9f9a7f596e3dd31f05f9852940d177924 · Patch
• https://git.kernel.org/stable/c/0a1394e07c5d6bf1bfc25db8589ff1b1bfb6f46a · Patch