PT-2025-38212 · Linux+2 · Linux Kernel+2

Published 2023-06-15 · Updated 2026-04-20 · CVE-2023-53362

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2-rc5-00047-g7c46948a6e9c

Description A flaw exists in the Linux kernel related to the fsl-mc bus driver. Changes introduced by VFIO caused the creation of a pseudo-device as a child of fsl-mc devices, leading to a kernel crash when attempting to bind an fsl-mc device to VFIO. The issue arises from an incorrect assumption that all child devices of fsl-mc are also fsl-mc devices.

Recommendations Update the Linux kernel to a version after 6.2-rc5-00047-g7c46948a6e9c.

Exploit

Fix

Improper Access Control

Incorrect Privilege Assignment

Information Disclosure

Weakness Enumeration

CWE-284

CWE-266

CWE-200

Related Identifiers

BDU:2026-03798

CVE-2023-53362

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1407

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53362.json · Exploit
• https://git.kernel.org/stable/c/303c9c63abb9390e906052863f82bb4e9824e5c0 · Patch
• https://ubuntu.com/security/CVE-2023-53362 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:3751-1 · Vendor Advisory
• https://git.kernel.org/stable/c/5bd9dc3e767edf582be483be8d6bbc7433bd4cf8 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4132-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53362 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53362 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53362 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53362 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory