PT-2025-40680 · Linux+3 · Linux Kernel+3

Published 2025-10-04 · Updated 2026-05-26 · CVE-2023-53538

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.12.0-0 fbk13 clang 7455 gb24de3bdb045

Description The Linux kernel contains a flaw within the btrfs subsystem related to tree mod log handling. Specifically, a race condition exists during tree mod log rewind, potentially leading to a kernel panic. This issue arises when logical inode resolution utilizes a tree mod log sequence number and encounters a rewind operation on a busy node. The sequence of tree mod log operations can cause an out-of-bounds write during a memmove operation, resulting in the kernel panic.

Recommendations Update the Linux kernel to version 5.12.0-0 fbk13 clang 7455 gb24de3bdb045 or a later version to address this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

AZL-77393

CVE-2023-53538

ECHO-6F04-CBF6-D6AC

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4301-1

SUSE-SU-2025_4128-1

SUSE-SU-2025_4140-1

SUSE-SU-2025_4301-1

Affected Products

Debian

Linux Kernel

Suse

Btrfs

References · 1014

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53538.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53538 · Vendor Advisory
• https://git.kernel.org/stable/c/11f14402fe3437852cb44945b3b9f1bdb4032956 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:21056-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4132-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-53538 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53538 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53538 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21064-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53538 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53538 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53538 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53538 · Security Note