PT-2025-38194 · Linux+2 · Linux Kernel+2

Published 2023-03-27 · Updated 2025-11-14 · CVE-2023-53344

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc6-syzkaller-80422-geda666ff2276

Description The Linux kernel contains a flaw within the bcm tx setup function in the CAN (Controller Area Network) subsystem. Specifically, the issue involves an uninitialized value being used in a comparison after a potential error during a memory copy operation (memcpy from msg). This occurs when copying content to a newly allocated frame, potentially leading to a kernel memory safety issue. The vulnerability was identified through testing with Syzkaller, a coverage-guided fuzzer. The bcm tx setup function calls memcpy from msg to copy content, and if this function returns an error, the subsequent comparison uses uninitialized memory, triggering the issue.

Recommendations Update to Linux kernel version 6.2.0-rc6-syzkaller-80422-geda666ff2276 or a later version that includes the fix.

Exploit

Fix

Use of Uninitialized Resource

Access of Uninitialized Pointer

Weakness Enumeration

CWE-908

CWE-824

Related Identifiers

BDU:2026-03643

CVE-2023-53344

OESA-2025-2659

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1025

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53344.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50484 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39782 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53641 · Security Note
• https://ubuntu.com/security/CVE-2023-53344 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53344 · Vendor Advisory
• https://git.kernel.org/stable/c/3fa0f1e0e31b1b73cdf59d4c36c7242e6ef821be · Patch
• https://git.kernel.org/stable/c/618b15d09fed6126356101543451d49860db4388 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53427 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53446 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50352 · Security Note
• https://git.kernel.org/stable/c/ab2a55907823f0bca56b6d03ea05e4071ba8535f · Patch