PT-2025-38438 · Linux+1 · Linux Kernel+1

Published 2025-09-18 · Updated 2025-09-19 · CVE-2023-53419

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability exists in the Linux kernel related to a potential NULL-pointer dereference within the rcu print task exp stall() function when built with CONFIG PREEMPT RCU=y. This occurs when CPU2 accesses the rcu node structure's exp tasks field without holding the rcu node structure's lock, and does not observe CPU1's change to the rcu node structure's exp tasks in time. Specifically, if CPU1 sets the rcu node structure's exp tasks pointer to NULL, CPU2 might dereference that NULL pointer. The issue arises from improper synchronization when accessing the exp tasks field of the rcu node structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-05901

CVE-2023-53419

Affected Products

Astra Linux

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53419.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53419 · Security Note
• https://git.kernel.org/stable/c/3c1566bca3f8349f12b75d0a2d5e4a20ad6262ec · Patch
• https://git.kernel.org/stable/c/2bc0ae94ef1f9ed322d8ee439de3239ea3632ab2 · Patch
• https://git.kernel.org/stable/c/a7d21b8585894e6fff973f6ddae42f02b13f600f · Patch
• https://bdu.fstec.ru/vul/2026-05901 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53419 · Vendor Advisory
• https://git.kernel.org/stable/c/d0a8c0e31a09ec1efd53079083e2a677956b4d91 · Patch
• https://git.kernel.org/stable/c/e30a55e98ae6c44253d8b129efefd5da5bc6e3bc · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53419 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53419 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53419 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53419 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53419 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53419 · Vendor Advisory