PT-2025-38207 · Linux+2 · Linux Kernel+2

Published

2023-06-13

·

Updated

2025-11-19

·

CVE-2023-53357

CVSS v3.1

7.1

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contained a flaw in the md/raid10 subsystem within the md bitmap get counter() function. A missing check for out-of-bounds access in the md bitmap get counter() function, following a call to md bitmap checkpage(), could lead to a slab-out-of-bounds error when a large number was written to md/bitmap set bits. The md bitmap checkpage() function returns -EINVAL if page >= bitmap->pages, but this return value was not immediately checked in md bitmap get counter().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-06011
CVE-2023-53357
OESA-2025-2349
OESA-2025-2350
OESA-2025-2533
SUSE-SU-2025:03600-1
SUSE-SU-2025:03614-1
SUSE-SU-2025:03615-1
SUSE-SU-2025:03634-1
SUSE-SU-2025:20851-1
SUSE-SU-2025:20861-1
SUSE-SU-2025:20870-1
SUSE-SU-2025:20898-1
SUSE-SU-2025:3751-1
SUSE-SU-2025:3761-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4141-1

Affected Products

Astra Linux
Linux Kernel
Suse