PT-2025-40168 · Linux+2 · Linux Kernel+2

Published 2023-06-12 · Updated 2025-11-19 · CVE-2023-53461

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel related to io uring request completions during ring exit. Specifically, the io ring exit work function, invoked by a kernel worker, could potentially trigger the hung task detection mechanism if the owning task is stopped (e.g., via SIGSTOP) and requires task work to complete requests. This is due to the function previously waiting uninterruptibly for completions. Switching to an interruptible wait state addresses this issue, as the io uring module already has a separate warning for stuck exits.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-456

CWE-453

Related Identifiers

BDU:2026-04081

CVE-2023-53461

RHSA-2023:6583

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Astra Linux

Linux Kernel

Suse

References · 1412

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53461.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-53461 · Security Note
• https://git.kernel.org/stable/c/28e649dc9947e6525c95e32aa9a8e147925e3f56 · Patch
• https://osv.dev/vulnerability/CVE-2023-53461 · Vendor Advisory
• https://git.kernel.org/stable/c/58e80cb68b057e974768792c34708c6957810486 · Patch
• https://bdu.fstec.ru/vul/2026-04081 · Security Note
• https://git.kernel.org/stable/c/8e29835366138389bfad3b31ea06960d0a77bf77 · Patch
• https://git.kernel.org/stable/c/b50d6e06cca7b67a3d73ca660dda27662b76e6ea · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53461 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20851-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53461 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53461 · Vendor Advisory