PT-2025-40703 · Linux+1 · Linux Kernel+1

Published 2023-11-07 · Updated 2026-04-20 · CVE-2023-53561

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s wwan subsystem, specifically within the iosm component. During a suspend and resume cycle, a NULL pointer dereference can occur during device removal if the ipc imem wwan channel init() function fails to obtain valid device capabilities, preventing resource allocation. Subsequently, attempting to deinitialize the unallocated wwan structure within ipc wwan deinit() leads to the dereference error. The ipc imem run state worker() function has been updated to handle return values and release resources in failure scenarios, also reporting link down events to user space applications for potential device reset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_16880

AZL-77435

CVE-2023-53561

RHSA-2023:6583

RHSA-2023_6583

Affected Products

Linux Kernel

Red Hat

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53561.json · Exploit
• https://ubuntu.com/security/CVE-2023-53561 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53561 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53561 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53561 · Vendor Advisory
• https://git.kernel.org/stable/c/60829145f1e2650b31ebe6a0ec70a9725b38fa2c · Patch
• https://osv.dev/vulnerability/CVE-2023-53561 · Vendor Advisory
• https://git.kernel.org/stable/c/862c6e3e26735247d8a4df41fa2421909c3f4d63 · Patch
• https://osv.dev/vulnerability/AZL-77435 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53561 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53561 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53561 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53561 · Vendor Advisory
• https://git.kernel.org/stable/c/ee44bacf462db3ec6e4f0dcfa7931e768670d77c · Patch
• https://git.kernel.org/linus/60829145f1e2650b31ebe6a0ec70a9725b38fa2c · Note