PT-2025-40176 · Linux+1 · Linux Kernel+1

Published 2023-08-23 · Updated 2026-04-20 · CVE-2023-53469

Positive Technologies (AI Summary)

CVSS v2.0

3.8

Low

Base vector

AV:L/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5

Description The Linux kernel contains a flaw in the unix stream sendpage() function related to a null pointer dereference. This issue occurs when handling sockets in a specific loop scenario involving garbage collection, potentially leading to a use-after-free condition. The problem was addressed by locking the peer's receive queue within the unix stream sendpage() function.

Recommendations Update to version 6.5 or later.

Exploit

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

BDU:2026-04558

CVE-2023-53469

ECHO-2E90-3164-8B50

Affected Products

Debian

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53469.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53469 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2023-53469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53469 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53469 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53469 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04558 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53469 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53469 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53469 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53469 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53469 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-53469 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53469 · Vendor Advisory
• https://git.kernel.org/stable/c/2dde18cd1d8fac735875f2e4987f11817cc0bc2c · Note