PT-2025-38038 · Linux+2 · Linux Kernel+2

Published 2023-02-21 · Updated 2026-05-26 · CVE-2023-53320

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The mpi3mr get all tgt info() function contains several issues. The function incorrectly calculates the valid entry length in alltgt info by assuming an incorrect size for the header of the mpi3mr device map info struct. It also incorrectly calculates the valid entry length by excluding one entry and uses memcpy() when substitution would be sufficient. Additionally, it specifies an incorrect length to sg copy from buffer(), leading to a potential out-of-bounds write.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Corruption

Out of bounds Read

Weakness Enumeration

CWE-787

CWE-125

Related Identifiers

BDU:2026-03754

CVE-2023-53320

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 838

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53320.json · Exploit
• https://git.kernel.org/stable/c/8ba997b22f2cd5d29aad8c39f6201f7608ed0c04 · Patch
• https://git.kernel.org/stable/c/fb428a2005fc1260d18b989cc5199f281617f44d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03754 · Security Note
• https://git.kernel.org/stable/c/2f3d3fa5b8ed7d3b147478f42b00b468eeb1ecd2 · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53320 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53320 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53320 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53320 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53320 · Security Note
• https://ubuntu.com/security/CVE-2023-53320 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53320 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53320 · Security Note