PT-2025-40191 · Linux+3 · Linux Kernel+3

Published 2023-02-08 · Updated 2025-11-24 · CVE-2023-53484

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the cpu rmap library. Specifically, a use-after-free condition can occur on the rmap->obj array entries. This happens when irq set affinity notifier() is called with a NULL argument, leading to the freeing of a glue pointer within the array, but leaving the pointer itself in the array. A subsequent call to free irq cpu rmap() then attempts to free this already freed entry. The fix involves setting the array entry to NULL and adding a check within free irq cpu rmap() to ensure the entry is non-zero before iterating.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

CWE-664

Related Identifiers

BDU:2026-03342

CVE-2023-53484

SUSE-SU-2025:4189-1

Affected Products

Astra Linux

Linux Kernel

Suse

Cpu Rmap

References · 312

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53484.json · Exploit
• https://git.kernel.org/stable/c/981f339d2905b6a92ef59358158b326493aecac5 · Patch
• https://git.kernel.org/stable/c/d1308bd0b24cb1d78fa2747d5fa3e055cc628a48 · Patch
• https://git.kernel.org/stable/c/cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000 · Patch
• https://git.kernel.org/stable/c/c6ed54dd90698dc0744d669524cc1c122ded8a16 · Patch
• https://git.kernel.org/stable/c/67bca5f1d644f4e79b694abd8052a177de81c37f · Patch
• https://git.kernel.org/stable/c/f748e15253833b771acbede14ea98f50831ac289 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53484 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53484 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53484 · Vendor Advisory
• https://git.kernel.org/stable/c/4e0473f1060aa49621d40a113afde24818101d37 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53484 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53484 · Vendor Advisory
• https://git.kernel.org/stable/c/c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4 · Patch
• https://bdu.fstec.ru/vul/2026-03342 · Security Note