PT-2025-41124 · Linux+1 · Linux Kernel+1

Published 2023-03-31 · Updated 2026-02-03 · CVE-2023-53680

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the Network File System daemon (NFSD). Specifically, the OPDESC() function does not perform adequate range checking on the operation number (opnum) it receives, assuming callers will avoid out-of-bounds values. The nfsd4 decode compound() function can invoke OPDESC() with opnum set to OP ILLEGAL (value 10044), which exceeds the bounds of the nfsd4 ops array. This can lead to undefined behavior.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

BDU:2026-04104

CVE-2023-53680

OESA-2026-1275

RHSA-2026:0532

RHSA-2026:0533

RHSA-2026:0534

RHSA-2026:0535

RHSA-2026:0536

RHSA-2026:0537

RHSA-2026:0576

SUSE-SU-2025:4111-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4320-1

Affected Products

Linux Kernel

Suse

References · 487

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53680.json · Exploit
• https://git.kernel.org/stable/c/f352c41fa718482979e7e6b71b4da2b718e381cc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38111 · Security Note
• https://git.kernel.org/stable/c/50827896c365e0f6c8b55ed56d444dafd87c92c5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53680 · Security Note
• https://git.kernel.org/stable/c/804d8e0a6e54427268790472781e03bc243f4ee3 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53680 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-49157 · Security Note
• https://git.kernel.org/stable/c/a64160124d5a078be0c380b1e8a0bad2d040d3a1 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-71093 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53680 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-40178 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38713 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory