PT-2025-38351 · Linux+1 · Linux Kernel+1

Published 2023-04-13 · Updated 2025-10-31 · CVE-2023-53372

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in the sctp ifwdtsn skip function. A potential overflow can occur when traversing ifwdtsn skips, specifically during the dereference of data within the sctp ifwdtsn skip structure. This happens because the code only checks the position against the end of the chunk, failing to account for the size of the structure itself.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-787

CWE-404

CWE-476

Related Identifiers

BDU:2026-03797

CVE-2023-53372

OESA-2025-2553

RHSA-2023:6583

RHSA-2023:7077

RHSA-2024:0575

Affected Products

Astra Linux

Linux Kernel

References · 56

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53372.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-53168 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53271 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53372 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53265 · Security Note
• https://git.kernel.org/stable/c/5c9367ac5a22d71841bcd00130f9146c9b227d57 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38352 · Security Note
• https://git.kernel.org/stable/c/79b28f42214a3d0d6a8c514db3602260bd5d6cb5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50494 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53453 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53296 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53515 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38729 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53372 · Security Note
• https://ubuntu.com/security/CVE-2023-53372 · Vendor Advisory