PT-2025-41099 · Linux+1 · Linux Kernel+1

Published 2023-04-05 · Updated 2025-10-08 · CVE-2023-53655

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc2-00320-g1f5abbd77e2c

Description A stack overflow can occur due to the rcu irq enter check tick() function being probed. Registering a kprobe on this function can lead to a kernel stack overflow when CONFIG NO HZ FULL is enabled and the kernel is booted with the argument "nohz full=". The issue is reproducible by enabling CONFIG NO HZ FULL, booting the kernel with the specified argument, and then using the following commands: cd /sys/kernel/tracing/, echo 'p:mp1 rcu irq enter check tick' >> kprobe events, and echo 1 > events/kprobes/enable. The commit resolves this by adding rcu irq enter check tick() to the kprobes blacklist using NOKPROBE SYMBOL().

Recommendations Update to a version later than 6.2.0-rc2-00320-g1f5abbd77e2c.

Exploit

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

ALSA-2025_16880

BDU:2026-03818

CVE-2023-53655

RHSA-2024:2394

RHSA-2024_2394

Affected Products

Linux Kernel

Red Hat

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53655.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53655 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53655 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53655 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53655 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53655 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53655 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53655 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03818 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53655 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.180 · Note
• https://access.redhat.com/security/cve/cve-2023-53655 · Note
• https://lore.kernel.org/linux-cve-announce/2025100701-CVE-2023-53655-d389@gregkh/T · Note
• https://git.kernel.org/stable/c/7a29fb4a4771124bc61de397dbfc1554dbbcc19c · Note
• https://git.kernel.org/stable/c/7b5a97333e920b69356e097f185bdc51d61e66ee · Note