PT-2025-41064 · Linux+4 · Linux Kernel+4

Published 2023-04-13 · Updated 2026-04-20 · CVE-2023-53620

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel has a flaw related to the md (Multiple Devices) subsystem. Specifically, the status resync() function can experience a soft lockup during the calculation of 'curr resync - recovery active' when displaying a progress bar. This occurs because curr resync and recovery active are updated in md do sync() and read concurrently by status resync(), potentially causing an overflow resulting in the function getting stuck in a loop. The issue is resolved by setting resync to MD RESYNC ACTIVE in such cases, ensuring accurate progress reporting.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Locking

Improper Resource Release

Weakness Enumeration

CWE-667

CWE-404

Related Identifiers

ALSA-2025_16880

AZL-76641

BDU:2026-01462

CESA-2023_7077

CVE-2023-53620

RHSA-2023:6583

RHSA-2023:7077

RHSA-2023:7539

RHSA-2023_6583

RHSA-2023_7077

SUSE-SU-2025:4189-1

Affected Products

Centos

Debian

Linux Kernel

Red Hat

Suse

References · 314

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53620.json · Exploit
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53620 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53620 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53620 · Security Note
• https://git.kernel.org/stable/c/23309704e90859af2662bedc44101e6d1d2ece7e · Patch
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53620 · Vendor Advisory
• https://git.kernel.org/stable/c/b4acb6c3ede88d6b7d33742a09e63cfce5e7fb69 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53620 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53620 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01462 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53620 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53620 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://git.kernel.org/stable/c/6efddf1e32e2a264694766ca485a4f5e04ee82a7 · Patch