PT-2025-38192 · Linux+3 · Linux Kernel+3

Published 2025-09-17 · Updated 2025-12-11 · CVE-2023-53342

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.5

Description The Linux kernel contains a flaw in the networking subsystem related to the handling of IPv4 routes with network host ID (nhid) when using Marvell Prestera devices. Specifically, the issue arises when attempting to add an IPv4 route referencing a next hop via its ID, triggering warnings and potentially leading to system instability. The problem stems from incorrect function calls within the fib info nh() and fib info nhc() functions.

Recommendations Update to Linux kernel version 6.4.5 or later to address this issue.

Exploit

Fix

Related Identifiers

CVE-2023-53342

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Linux Kernel

Marvell Prestera

Suse

References · 1404

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53342.json · Exploit
• https://git.kernel.org/stable/c/2aa71b4b294ee2c3041d085404cea914be9b3225 · Patch
• https://git.kernel.org/stable/c/8373dca3c1f8a203cecebe3421dbe890c4f08e16 · Patch
• https://osv.dev/vulnerability/CVE-2023-53342 · Vendor Advisory
• https://git.kernel.org/stable/c/a3e5f3b7f25d7b90f3b76d98a946fec6e5f79216 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20851-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53342 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53342 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53342 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory