PT-2025-38210 · Linux+2 · Linux Kernel+2

Published 2023-06-09 · Updated 2025-12-11 · CVE-2023-53360

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to NFSv4.2 scratch handling for READ PLUS operations. The read code may send multiple requests using the same nfs pgio header, while nfs4 proc read setup() is only called once. This can lead to a double-free of the scratch buffer and setting a NULL pointer with a non-zero length to the xdr scratch buffer, resulting in an oops during decoding when handling READ PLUS hole segments.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Double Free

Weakness Enumeration

CWE-404

CWE-415

Related Identifiers

BDU:2026-03353

CVE-2023-53360

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1408

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53360.json · Exploit
• https://git.kernel.org/stable/c/ae5d5672f1db711e91db6f52df5cb16ecd8f5692 · Patch
• https://git.kernel.org/stable/c/303a78052091c81e9003915c521fdca1c7e117af · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53360 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03353 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20851-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53360 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53360 · Vendor Advisory
• https://git.kernel.org/stable/c/adac9f0ddd2b291c7ce41f549fdb27a13616cff5 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53360 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a2f4cb206bd94b3f4a7bb05fcdce9525283b5681 · Patch
• https://ubuntu.com/security/CVE-2023-53360 · Vendor Advisory