PT-2025-38033 · Ath11K+3 · Ath11K+3

Published 2025-09-16 · Updated 2025-10-23 · CVE-2023-53315

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability exists in the Linux kernel related to the ath11k driver, specifically concerning SKB (Socket Kernel Buffer) corruption within the REO (Receive Early Output) destination ring. Prolonged traffic operation can lead to the reception of invalid RX descriptors, causing the retrieval of incorrect SKB memory and subsequent memory corruption, potentially leading to a system crash. The issue stems from an incorrect starting ID for IDR (IDR lookup with buffer id) allocation and a lack of proper descriptor validation. The crash signature involves a kernel paging request at a specific virtual address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-05892

CVE-2023-53315

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

Ath11K

References · 863

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53315.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-53315 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53315 · Vendor Advisory
• https://git.kernel.org/stable/c/3d3f8fe01a01d94a17fe1ae0d2e894049a972717 · Patch
• https://git.kernel.org/stable/c/866921dc06b94df91acfcf9359b57da943ed99b3 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53315 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://git.kernel.org/stable/c/068fd06148fbf0af95bb08dc77cff34ee679fdbc · Patch
• https://bdu.fstec.ru/vul/2026-05892 · Security Note
• https://git.kernel.org/stable/c/67459491f78146bcf7d93596e5b709d063dff5d8 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory
• https://git.kernel.org/stable/c/f9fff67d2d7ca6fa8066132003a3deef654c55b1 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53315 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory