PT-2025-41104 · Linux+2 · Linux Kernel+2

Published 2022-11-15 · Updated 2025-11-28 · CVE-2023-53660

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc2+

Description The Linux kernel contains an issue within the bpf and cpumap subsystems related to handling socket buffers (skb) during pointer ring cleanup. Specifically, the cpu map ring cleanup() function does not properly handle skb mode, treating socket buffers within the pointer ring as XDP frames. This can lead to incorrect memory usage and warnings during XDP redirect operations, particularly when using both skb-mode and stress-mode. A premature stop of the kthread cpu map kthread run() can also contribute to this issue.

Recommendations Update to a version later than 6.5.0-rc2+ to address this issue.

Exploit

Fix

Weakness Enumeration

CWE-253

Related Identifiers

ALSA-2025_16880

BDU:2026-03830

CVE-2023-53660

RHSA-2022:8267

RHSA-2022_8267

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4301-1

Affected Products

Linux Kernel

Red Hat

Suse

References · 1017

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53660.json · Exploit
• https://git.kernel.org/stable/c/b58d34068fd9f96bfc7d389988dfaf9a92a8fe00 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03830 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21056-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53660 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4132-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53660 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21064-1 · Vendor Advisory
• https://git.kernel.org/stable/c/cbd000451885801e9bbfd9cf7a7946806a85cb5e · Patch
• https://git.kernel.org/stable/c/937345720d18f1ad006ba3d5dcb3fa121037b8a2 · Patch
• https://cve.org/CVERecord?id=CVE-2023-53660 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21040-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory