PT-2025-38216 · Linux+2 · Linux Kernel+2

Published 2023-02-24 · Updated 2026-04-20 · CVE-2023-53366

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0-0 fbk12 clang 7346 g1bb6f2e7058f #1

Description The Linux kernel contains a flaw related to block device handling during polled I/O operations. Specifically, the code did not sufficiently check for a NULL block device (bio->bi bdev) which could lead to a crash when multiple tasks are performing polled I/O concurrently and sharing a poll queue. This can occur if one task completes I/O from another task and re-allocates the bio before the original task finishes polling for it.

Recommendations Update the Linux kernel to version 5.12.0-0 fbk12 clang 7346 g1bb6f2e7058f #1 or a later version to address this issue.

Exploit

Fix

Race Condition

NULL Pointer Dereference

Weakness Enumeration

CWE-662

CWE-362

CWE-476

Related Identifiers

ALSA-2025_16880

AZL-72263

BDU:2026-03359

CVE-2023-53366

RHSA-2023:6583

RHSA-2023_6583

Affected Products

Astra Linux

Linux Kernel

Red Hat

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53366.json · Exploit
• https://git.kernel.org/stable/c/0510d5e654d05053ed0e6309a9b42043ac9903ab · Patch
• https://osv.dev/vulnerability/AZL-72263 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53366 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53366 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03359 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53366 · Vendor Advisory
• https://git.kernel.org/stable/c/310726c33ad76cebdee312dbfafc12c1b44bf977 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53366 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53366 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53366 · Vendor Advisory
• https://git.kernel.org/stable/c/1af0bdca03f367874da45d6cbe05fa05b90b1439 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53366 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53366 · Security Note
• https://ubuntu.com/security/CVE-2023-53366 · Vendor Advisory