PT-2025-37870 · Linux+2 · Linux Kernel+2

Published 2023-02-02 · Updated 2025-10-31 · CVE-2023-53265

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-1868 #1

Description The Linux kernel contains a flaw within the UBI (Unsorted Block Images) subsystem related to VID (Volume ID) header handling. Specifically, the code does not adequately ensure that the sum of the VID header offset and VID header size remains within the allocated memory region, leading to a potential slab out-of-bounds write condition. This can result in a kernel crash.

Recommendations versions prior to 6.0.0-1868 #1: Update the Linux kernel to a version that addresses this issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-02443

CVE-2023-53265

OESA-2025-2553

SUSE-SU-2025:03613-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03626-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1041

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53265.json · Exploit
• https://git.kernel.org/stable/c/846bfba34175c23b13cc2023c2d67b96e8c14c43 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03613-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50405 · Security Note
• https://git.kernel.org/stable/c/61aeba0e4b4124cfe3c5427feaf29c626dfa89e5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38352 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53604 · Security Note
• https://ubuntu.com/security/CVE-2023-53265 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-02443 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53265 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53265 · Vendor Advisory
• https://git.kernel.org/stable/c/701bb3ed5a88a73ebbe1266895bdeff065226dca · Patch
• https://git.kernel.org/stable/c/e1b73fe4f4c6bb80755eb4bf4b867a8fd8b1a7fe · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53296 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53265 · Vendor Advisory