PT-2025-40690 · Linux+1 · Linux Kernel+1

Published 2023-07-13 · Updated 2026-03-27 · CVE-2023-53548

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6

Description The usbnet driver in the Linux kernel has an issue where it trusts the bulk endpoint addresses received during the probe routine without verifying their existence, type, or direction. This can lead to a WARNING message in usbnet start xmit/usb submit urb and potentially other issues. The syzbot fuzzer identified this problem. The fix involves adding a check to ensure the endpoints actually exist and have the expected type and directions.

Recommendations Update to a version later than 6.4.0-rc7-syzkaller-00014-g692b7dc87ca6.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-01503

CVE-2023-53548

OESA-2025-2469

OESA-2026-1762

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4111-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4189-1

SUSE-SU-2025:4301-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

References · 1405

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53548.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-53548 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53480 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53220 · Security Note
• https://git.kernel.org/stable/c/27d0f755d649d388fcd12f01436c9a33289e14e3 · Patch
• https://git.kernel.org/stable/c/1bebbd9b8037a9cc75984317cb495dec4824c399 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53548 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01503 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4320-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory