PT-2025-37700 · Linux+3 · Linux Kernel+3

Published 2023-01-01 · Updated 2026-03-14 · CVE-2023-53259

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc4

Description The Linux kernel contains a flaw in the VMCI subsystem where a call to get user pages fast() in vmci host setup notify() can return a NULL value for context->notify page, leading to a general protection fault (GPF). The issue occurs due to a missing check for a NULL context->notify page after the call to get user pages fast().

Recommendations Update to a version of the Linux kernel that addresses this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-05886

CVE-2023-53259

DLA-4327-1

OESA-2025-2406

OESA-2025-2407

OESA-2025-2408

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

References · 915

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53259.json · Exploit
• https://git.kernel.org/stable/c/055891397f530f9b1b22be38d7eca8b08382941f · Patch
• https://git.kernel.org/stable/c/d4198f67e7556b1507f14f60d81a72660e5560e4 · Patch
• https://git.kernel.org/stable/c/b4239bfb260d1e6837766c41a0b241d7670f1402 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-49234 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53150 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22073 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50249 · Security Note
• https://osv.dev/vulnerability/DLA-4327-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-38724 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38615 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-21801 · Security Note
• https://ubuntu.com/security/CVE-2023-53259 · Vendor Advisory
• https://git.kernel.org/stable/c/1a726cb47fd204109c767409fa9ca15a96328f14 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53259 · Security Note