PT-2025-38049 · Linux+4 · Linux Kernel+4
Published
2023-08-04
·
Updated
2025-11-19
·
CVE-2023-53331
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw was discovered in the Linux kernel’s pstore/ram subsystem. Following a previous commit, initialization could incorrectly assume a persistent ram (prz) buffer was valid even if the buffer size was zero, potentially leading to out-of-bounds writes and system panics. The issue occurs because the start value of the buffer was not checked during initialization. This could lead to a panic when writing to functions such as
sysdump panic event, atomic notifier call chain, and panic.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Memory Corruption
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Hat
Rocky Linux
Suse