PT-2025-38361 · Linux+1 · Linux Kernel+1

Published 2023-05-19 · Updated 2026-04-20 · CVE-2023-53382

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc1+ #42

Description A vulnerability exists in the Linux kernel's smc module where a crash can occur when attempting to use SMCRv2. This issue arises during the Connection-Level Control (CLC) handshake, specifically when switching from SMCRv2 to SMCRv1 due to resource allocation failures. The vulnerability occurs because resources assigned during the SMCRv2 attempt are not properly reset, leading to an incorrect link index being used when accessing memory regions (MR) in the smc clc send confirm accept() function, potentially resulting in a kernel NULL pointer dereference.

Recommendations Update to a version later than 6.4.0-rc1+ #42 to resolve this issue.

Exploit

Fix

Improper Initialization

NULL Pointer Dereference

Weakness Enumeration

CWE-665

CWE-476

CWE-459

Related Identifiers

BDU:2026-03281

CVE-2023-53382

Affected Products

Astra Linux

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53382.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-53382 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53382 · Vendor Advisory
• https://git.kernel.org/stable/c/35112271672ae98f45df7875244a4e33aa215e31 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53382 · Vendor Advisory
• https://git.kernel.org/stable/c/9540765d1882d15497d880096de99fafabcfa08c · Patch
• https://git.kernel.org/stable/c/d33be18917ffe69865dfed18b0a67b0dee0b47d7 · Patch
• https://osv.dev/vulnerability/CVE-2023-53382 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53382 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53382 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53382 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53382 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53382 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1968779854737821901 · Twitter Post