PT-2025-37886 · Rtl8723Bs+3 · Rtl8723Bs+3

Published 2023-03-08 · Updated 2025-10-23 · CVE-2023-53281

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains an issue within the rtl8723bs driver related to locking in the rtw join timeout handler() function. A modification to use spin [un]lock irq() instead of spin [un]lock bh() within this function caused an oops in kernel/softirq.c due to unnecessary disabling of Interrupt Requests (IRQs). The rtw join timeout handler() function calls rtw do join(), which acquires pmlmepriv->scanned queue.lock using spin [un]lock bh(). Re-enabling softirqs via spin unlock bh() triggered the error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Improper Locking

Weakness Enumeration

CWE-833

CWE-404

CWE-667

Related Identifiers

BDU:2026-03802

CVE-2023-53281

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

Rtl8723Bs

References · 868

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53281.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53281 · Security Note
• https://git.kernel.org/stable/c/2a50e44a66d268ee5db3d177f1fdc1503dbce6e7 · Patch
• https://bdu.fstec.ru/vul/2026-03802 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53281 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53281 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53281 · Vendor Advisory
• https://git.kernel.org/stable/c/215792eda008f6a1e7ed9d77fa20d582d22bb114 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://git.kernel.org/stable/c/209850f17717a3b5cc558578bef5631ac7045539 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53281 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53281 · Vendor Advisory