PT-2025-38446 · Linux+2 · Linux Kernel+2

Published 2022-11-18 · Updated 2025-11-14 · CVE-2023-53427

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc5+ #82

Description A use-after-free (UAF) issue exists in the CIFS implementation of the Linux kernel. Specifically, the issue occurs when destroying the Message Response (MR) list. If MR allocation fails, the MR recovery work is not initialized and the list is not cleared, leading to a warning and a UAF condition upon release of the MR.

Recommendations Update the Linux kernel to a version newer than 6.1.0-rc5+ #82 to resolve this issue.

Exploit

Fix

Improper Resource Release

Use After Free

Improper Initialization

Weakness Enumeration

CWE-404

CWE-416

CWE-665

Related Identifiers

BDU:2026-03341

CVE-2023-53427

OESA-2025-2659

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1018

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53427.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-50489 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50484 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39782 · Security Note
• https://git.kernel.org/stable/c/7cbd5bdb5bd4404a5da4309521134b42c65846c0 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53641 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53427 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53185 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53582 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53446 · Security Note
• https://git.kernel.org/stable/c/275a3d2b9408fc4895e342f772cab9a89960546e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-50352 · Security Note
• https://git.kernel.org/stable/c/2d0c4f5f618f58eba03385363717703bee873c64 · Patch
• https://git.kernel.org/stable/c/3524d6da0fe88aee79f06be6572955d16ad76b39 · Patch
• https://ubuntu.com/security/CVE-2023-53427 · Vendor Advisory