PT-2025-41078 · Linux+1 · Linux Kernel+1

Published 2023-04-03 · Updated 2025-10-08 · CVE-2023-53634

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to Branch Target Identification (BTI) on the arm64 architecture. Specifically, when using BPF trampolines with the BPF TRAMP F CALL ORIG flag, a BTI exception can be triggered if the instruction following the call site is not a PACIASP instruction. This occurs because the trampoline uses BLR to return, and BTI-enabled kernels require a PACIASP instruction after the call site for safe branching. The issue arises when the call site is not followed by a PACIASP or BTI instruction. A fault log was provided demonstrating the BTI exception occurring during a test program execution. The root cause is that the JIT compiler does not always place a PACIASP instruction after the call site in BPF programs, leading to the BTI error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-04076

CVE-2023-53634

RHSA-2023:2458

RHSA-2023:6583

RHSA-2023_2458

RHSA-2023_6583

Affected Products

Linux Kernel

Red Hat

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53634.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53634 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53634 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04076 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53634 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53634 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53634 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53634 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53634 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53634 · Vendor Advisory
• https://access.redhat.com/security/cve/cve-2023-53634 · Note
• https://git.kernel.org/linus/738a96c4a8c36950803fdd27e7c30aca92dccefd · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/738a96c4a8c36950803fdd27e7c30aca92dccefd · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.12 · Note