PT-2025-40761 · Linux+3 · Linux Kernel+3

Published 2021-11-09 · Updated 2026-02-06 · CVE-2023-53598

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s MHI host component where the values read from the CHDBOFF and ERDBOFF registers are not properly validated. If these values fall outside the acceptable range for the MHI register space, an invalid memory address may be calculated, potentially leading to a kernel panic. This occurs because the read value is not range-checked before being used to compute an address.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-04423

CESA-2021_4356

CESA-2023_7077

CVE-2023-53598

RHSA-2021:4356

RHSA-2021_4356

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

References · 449

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53598.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04423 · Security Note
• https://git.kernel.org/stable/c/372f1752b74572b0a9d2288841eab7db17daccae · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53598 · Vendor Advisory
• https://git.kernel.org/stable/c/4e584127ec2bd42a37c88badb49df409f21fa40a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53598 · Security Note
• https://git.kernel.org/stable/c/a2cbb1a45a0c86ce77839c0875414efe1a89315e · Patch
• https://osv.dev/vulnerability/CVE-2023-53598 · Vendor Advisory
• https://git.kernel.org/stable/c/2343385fe6eed11d0432ab42a97b3ca4aef06a99 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53598 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53598 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53598 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53598 · Security Note
• https://git.kernel.org/stable/c/6a0c637bfee69a74c104468544d9f2a6579626d0 · Patch