PT-2025-40158 · Linux+5 · Linux Kernel+5

Published 2023-06-14 · Updated 2025-11-19 · CVE-2023-53451

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the scsi subsystem, specifically within the qla2xxx driver. Analysis using the Klocwork tool identified a potential NULL pointer dereference related to the cur dsd pointer. The issue can occur if the pointer is dereferenced without prior validation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2026-04589

CESA-2024_3138

CVE-2023-53451

RHSA-2024:2394

RHSA-2024:3138

RHSA-2024_2394

RHSA-2024_3138

SUSE-SU-2025:03600-1

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:3761-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Suse

Qla2Xxx

References · 2056

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53451.json · Exploit
• https://git.kernel.org/stable/c/ee4c9a93238b9ce3703942500cb1aeacf77090d2 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53451 · Vendor Advisory
• https://git.kernel.org/stable/c/02405f4023866ae91a611b5b85cb2e074ec2de5a · Patch
• https://git.kernel.org/stable/c/5a52a2e14fe866541bbc0033058e44bf0bf0c580 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53451 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53451 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://git.kernel.org/stable/c/4f90a8b0481615622bd0558aa8cf361bea872045 · Patch
• https://git.kernel.org/stable/c/ce2cdbe530b0066bae1f98dbab590a232d507eaa · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53451 · Security Note