PT-2025-40758 · Linux+2 · Linux Kernel+2

Published 2023-04-27 · Updated 2025-10-07 · CVE-2023-53595

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a flaw within the octeontx2-pf module, specifically related to macsec (Media Access Control Security). The issue involved NULL pointer dereferences occurring when the system rebooted after a macsec interface was created. This resulted in kernel crashes, as indicated by error messages like "Unable to handle kernel NULL pointer dereference." The call trace points to functions such as cn10k mdo del secy, macsec common dellink, and macsec notify as being involved in the crash sequence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-04422

CVE-2023-53595

RHSA-2025:6966

RHSA-2025_6966

Affected Products

Linux Kernel

Red Hat

Octeontx2-Pf

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53595.json · Exploit
• https://git.kernel.org/stable/c/1152c0f947b76e7731e039185cbd00fdb4389f00 · Patch
• https://osv.dev/vulnerability/CVE-2023-53595 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53595 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53595 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53595 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53595 · Security Note
• https://git.kernel.org/stable/c/a3dcc45eca017fca82ac47dbde6f41af960657e5 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53595 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04422 · Security Note
• https://ubuntu.com/security/CVE-2023-53595 · Vendor Advisory
• https://git.kernel.org/stable/c/13ff119b17e5e2916435ce01a0156c8698ad9e16 · Patch
• https://git.kernel.org/stable/c/699af748c61574125d269db260dabbe20436d74e · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53595 · Vendor Advisory
• https://twitter.com/CVEnew/status/1974508938973356055 · Twitter Post