PT-2025-40746 · Linux+5 · Linux Kernel+5

Published 2023-07-12 · Updated 2025-11-28 · CVE-2023-53583

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue in the RISC-V PMU driver. Specifically, the driver doesn't update the PERF HES STOPPED flag after a perf event overflow() function call, nor does it include a check for this flag in the riscv pmu start() function. This can lead to a warning message during unthrottling of events within the timer interrupt handler. Other PMU drivers, such as Arm, Loongarch, Csky, and Mips, do not exhibit this behavior and do not trigger the warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-703

Related Identifiers

BDU:2026-04436

CVE-2023-53583

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4301-1

Affected Products

Arm

Csky

Linux Kernel

Loongarch

Mips

Suse

References · 1013

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53583.json · Exploit
• https://git.kernel.org/stable/c/66843b14fb71825fdd73ab12f6594f2243b402be · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04436 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53583 · Security Note
• https://git.kernel.org/stable/c/aeb62beaf9cbd0a72e7f97c9af6d3e7f76ce2946 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53583 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21052-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53583 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53583 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4140-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21064-1 · Vendor Advisory