PT-2025-40209 · Linux+1 · Linux+11

CVE-2023-53502 · Published 2025-10-01 · Updated 2026-06-29

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A buffer overrun occurs in the xen/netback component when a guest sends a packet where the head plus 18 slots are present, but the length is less than or equal to XEN NETBACK TX COPY LEN. This condition leads to an underflow of the nr slots variable within the xenvif get requests() function, resulting in an incorrect termination condition for the subsequent loop and a buffer overrun of queue->tx map ops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-53502

Affected Products

Linux

Kernel-Lt

Kernel-Rt Debug

Kernel-Debug-Devel

Kernel-Rt-Devel

Kernel-Lt-Doc

Kernel-Lt-Headers

Kernel-Lt-Tools

Kernel-Tools-Libs

Kernel-Tools-Libs-Devel

Perf

Python3-Perf

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-53502 · Security Note
• https://git.kernel.org/stable/c/11e6919ae028b5de1fc48007354ea07069561b31 · Note
• https://git.kernel.org/stable/c/fa5b932b77c815d0e416612859d5899424bb4212 · Note
• https://git.kernel.org/stable/c/cf482893f721f76ac60c0a43482a59b2f194156b · Note
• https://git.kernel.org/stable/c/f9167a2d6b943f30743de6ff8163d1981c34f9a9 · Note
• https://git.kernel.org/stable/c/bc7b9a6c2ca42b116b0f24dbaa52b5a07d96d1d6 · Note
• https://git.kernel.org/stable/c/b14a3924c2675c22e07a5a190223b6b6cdc2867d · Note
• https://git.kernel.org/stable/c/534fc31d09b706a16d83533e16b5dc855caf7576 · Note
• https://git.kernel.org/stable/c/e1142d87c185c7d7bbf05d175754638b5b9dbf16 · Note
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/uyazvimost-kernel-lt-cve-2023-53502-7.3 · Note