PT-2025-38362 · Nvidia+3 · Nvidia T241-Fabric-4+3

Published 2025-09-18 · Updated 2026-04-20 · CVE-2023-53383

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to the NVIDIA T241-FABRIC-4 erratum. This hardware issue causes unexpected behavior in the Generic Interrupt Controller (GIC) when multiple transactions are received simultaneously from different sources, impacting NVIDIA server platforms with more than two T241 chips interconnected. The issue arises from the interleaving of packets from different GICs, potentially leading to GIC state corruption, kernel panics, and unexpected system behavior. Specifically, register reads from GICD I* and GICD N*, register writes to 64-bit GICD registers (excluding GICD IROUTERn*), and the ITS command MOVALL can result in multiple transfer packets over the inter-socket AXI4 Stream interface. Systems with more than two sockets requiring multi-transfer packets are affected. GICv4 is not supported, and GICv3 software model support requires a workaround.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

AZL-72269

BDU:2026-06021

CVE-2023-53383

RHSA-2023:5069

RHSA-2023:6583

SUSE-SU-2025:03615-1

SUSE-SU-2025:3761-1

Affected Products

Debian

Linux Kernel

Nvidia T241-Fabric-4

Suse

References · 840

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53383.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53383 · Security Note
• https://git.kernel.org/stable/c/35727af2b15d98a2dd2811d631d3a3886111312e · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53383 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53383 · Vendor Advisory
• https://git.kernel.org/stable/c/86ba4f7b9f949e4c4bcb425f2a1ce490fea30df0 · Patch
• https://bdu.fstec.ru/vul/2026-06021 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53383 · Security Note
• https://osv.dev/vulnerability/AZL-72269 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53383 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53383 · Vendor Advisory
• https://git.kernel.org/stable/c/867a4f6cf1a8f511c06e131477988b3b3e7a0633 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53383 · Vendor Advisory