PT-2025-40214 · Linux+2 · Linux Kernel+2

Published 2023-06-25 · Updated 2025-11-19 · CVE-2023-53507

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.15.0-1017.19.3.g0677e61-bluefield

Description The Linux kernel contains a flaw in the mlx5 driver where devlink parameters are not unregistered when an interface is down. This can lead to a warning message during system shutdown. The issue occurs when an interface is down, and the driver fails to unregister its devlink parameters. The provided trace indicates the issue occurs during device removal and shutdown processes.

Recommendations Update the Linux kernel to version 5.15.0-1017.19.3.g0677e61-bluefield or a later version to resolve this issue.

Exploit

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2025-12903

CVE-2023-53507

SUSE-SU-2025:03600-1

SUSE-SU-2025:03634-1

SUSE-SU-2025:20851-1

SUSE-SU-2025:20861-1

SUSE-SU-2025:20870-1

SUSE-SU-2025:20898-1

SUSE-SU-2025:3751-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4141-1

Affected Products

Linux Kernel

Suse

Mlx5

References · 1405

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53507.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53507 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20851-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53507 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:20861-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53507 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53507 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:20870-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12903 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53507 · Vendor Advisory
• https://git.kernel.org/stable/c/471f59b3455314f0cafacf3096453727876355a9 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:20898-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03634-1 · Vendor Advisory