PT-2025-37681 · Linux+1 · Linux Kernel+1

Published 2025-09-15 · Updated 2026-04-20 · CVE-2023-53240

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability exists in the Linux kernel related to the xsk (socket kernel) functionality. Specifically, the issue involves a potential NULL pointer dereference in the xsk transmit (Tx) path when an interface is not brought up (IFF UP flag not set). This can occur when using either the sendmsg() or poll() syscalls, both of which utilize a common function, xsk xmit(). The vulnerability arises because the interface up check is performed after napi id marking in the sendmsg() path, leading to a potential dereference of a NULL pointer if the interface is brought up after the napi id is marked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-71233

BDU:2026-05878

CVE-2023-53240

RHSA-2026:1441

RHSA-2026:1443

Affected Products

Astra Linux

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53240.json · Exploit
• https://git.kernel.org/stable/c/ffe19750e68d0bb21e8110b398346eef20b156a7 · Patch
• https://git.kernel.org/stable/c/cecc68559cd57fffb2be50685f262b9af2318e16 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53240 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53240 · Vendor Advisory
• https://git.kernel.org/stable/c/1596dae2f17ec5c6e8c8f0e3fec78c5ae55c1e0b · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53240 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53240 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53240 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53240 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53240 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-05878 · Security Note
• https://osv.dev/vulnerability/AZL-71233 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53240 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53240 · Vendor Advisory