PT-2025-41086 · Linux · Linux Kernel

Published 2023-04-18 · Updated 2026-04-20 · CVE-2023-53642

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained an incorrect exception table annotation in the clear user rep good() function. This could lead to a kernel oops report being generated instead of a proper -EFAULT return when a user access exception occurred. The issue stemmed from the exception handler not locating the actual instruction causing the user space access. The code responsible for this issue no longer exists in the mainline kernel, having been removed in a previous commit. A full series of upstream commits could resolve the issue, but a one-liner fix was implemented to address the annotation placement.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-03794

CVE-2023-53642

Affected Products

Linux Kernel

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53642.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53642 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2023-53642 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53642 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53642 · Security Note
• https://bdu.fstec.ru/vul/2026-03794 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53642 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53642 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53642 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53642 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53642 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/linus/76ce32682635fe907e0f8e64e039e773e5c7508f · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-53642 · Note
• https://twitter.com/CVEnew/status/1975590012931744235 · Twitter Post