PT-2025-41123 · Linux+4 · Linux Kernel+4

Published 2023-01-16 · Updated 2025-12-04 · CVE-2023-53679

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.14.0+

Description An integer underflow issue exists in the Linux kernel's mt7601u driver, specifically within the 'mt7601u rx skb from seg()' function. This underflow can occur due to manipulation of the dma len variable in a URB packet, leading to a bypass of 'bad frame' checks and ultimately a null pointer dereference when accessing the pointer p. The issue was identified using a modified version of syzkaller.

Recommendations Update the Linux kernel to a version newer than 5.14.0+.

Exploit

Fix

Integer Underflow

NULL Pointer Dereference

Weakness Enumeration

CWE-191

CWE-476

Related Identifiers

ALSA-2025_16880

BDU:2026-01530

CVE-2023-53679

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Centos

Linux Kernel

Red Hat

Suse

Mt7601U

References · 458

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53679.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53679 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53679 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory
• https://git.kernel.org/stable/c/47dc1f425af57b71111d7b01ebd24e04e8d967ef · Patch
• https://cve.org/CVERecord?id=CVE-2023-53679 · Security Note
• https://git.kernel.org/stable/c/1a1f43059afae5cc9409e0c3bc63bfc09bc8facb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53679 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53679 · Vendor Advisory
• https://git.kernel.org/stable/c/67e4519afba215199b6dfa39ce5d7ea673ee4138 · Patch
• https://ubuntu.com/security/CVE-2023-53679 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01530 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53679 · Vendor Advisory