PT-2025-37695 · Linux+4 · Linux+4

Published 2023-01-01 · Updated 2026-05-26 · CVE-2023-53254

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions linux (affected versions not specified)

Description The Linux kernel contains a flaw in the cacheinfo functionality where the shared cpu map is incorrectly handled when caches at different levels are shared between CPUs. This can lead to a slab-out-of-bounds access if CPUs do not share the same cache hierarchy, and mismatched shared cpu map when shared caches do not have the same index between CPUs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALSA-2025_16880

AZL-71242

BDU:2026-05883

CESA-2023_7077

CVE-2023-53254

OESA-2026-1306

OESA-2026-1341

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:03614-1

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0369-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Centos

Debian

Linux

Red Hat

Suse

References · 1442

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53254.json · Exploit
• https://git.kernel.org/stable/c/198102c9103fc78d8478495971947af77edb05c1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-54317 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71120 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38068 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23038 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53594 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53847 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40342 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38480 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53254 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39676 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53254 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory