PT-2025-41074 · Linux · Linux Kernel

Published 2023-04-04 · Updated 2025-10-08 · CVE-2023-53630

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.3.0-rc2-eeac8ede1755

Description A flaw exists in the Linux kernel's iommufd subsystem related to the unpinning of pages when an access is present. Specifically, an incorrect calculation of batch last index can cause the unmap operation to run over the end of the pages, leading to corruption of pages that were not mapped. This issue was identified by syzkaller and can trigger debugging warnings related to pinned pages. The root cause is an error in the calculation used during the unmapping process, potentially leading to out-of-bounds access.

Recommendations Update to Linux kernel version 6.3.0-rc2-eeac8ede1755 or a later version to address this issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2026-04091

CVE-2023-53630

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53630.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53630 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53630 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04091 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53630 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53630 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53630 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53630 · Security Note
• https://ubuntu.com/security/CVE-2023-53630 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53630 · Vendor Advisory
• https://git.kernel.org/stable/c/70726ce4d898db57bfc4ae30ecd7da63b0dd0aa4 · Note
• https://git.kernel.org/linus/727c28c1cef2bc013d2c8bb6c50e410a3882a04e · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1975590025346822259 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2023-53630 · Note