PT-2025-38193 · Linux+4 · Linux Kernel+4

Published 2023-07-08 · Updated 2025-11-19 · CVE-2023-53343

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-11996-gb121d614371c #35

Description A null pointer dereference issue exists in the Linux kernel's ICMPv6 implementation, specifically within the icmp6 dev() function. This occurs when processing certain IPv6 Extension Headers (RPL, SRv6, etc.) with link-local addresses as both source and destination. The vulnerability is triggered when a packet is forwarded to an external IP address contained within the IPv6 Extension Header, leading to a dereference of a null pointer in skb rt6 info(skb)->rt6i idev->dev.

Recommendations Update the Linux kernel to version 6.4.0-11996-gb121d614371c #35 or later to resolve this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2026-06010

CESA-2024_3138

CVE-2023-53343

RHSA-2024:2394

RHSA-2024:3138

RHSA-2024_2394

RHSA-2024_3138

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

References · 1416

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53343.json · Exploit
• https://git.kernel.org/stable/c/2aaa8a15de73874847d62eb595c6683bface80fd · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:03600-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://git.kernel.org/stable/c/3fabca5d9cae0140b6aad09a1c6b9aa57089fbb8 · Patch
• https://osv.dev/vulnerability/CVE-2023-53343 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53343 · Security Note
• https://git.kernel.org/stable/c/8803c59fde4dd370a627dfbf7183682fa0cabf70 · Patch
• https://bdu.fstec.ru/vul/2026-06010 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53343 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4132-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d30ddd7ff15df9d91a793ce3f06f0190ff7afacc · Patch
• https://git.kernel.org/stable/c/1462e9d9aa52d14665eaca6d89d22c4af44ede04 · Patch