PT-2025-41129 · Linux+1 · Linux Kernel+1

Published 2025-10-07 · Updated 2026-04-20 · CVE-2023-53685

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a memory leak in the TUN device when NAPI and multi-queue were enabled, and the queue was detached. The issue occurred when skb structures were placed into the sk write queue after the queue was detached. The vulnerability was identified through syzkaller testing, which reported memory leaks related to sk and skb objects. The root cause was a missing check for tfile->detached before queuing skb structures. The issue could be triggered by opening a TUN device with NAPI and multi-queue enabled, detaching the queue, and then writing to the device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-76428

CVE-2023-53685

SUSE-SU-2026:0473-1

Affected Products

Debian

Linux Kernel

References · 320

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53685.json · Exploit
• https://git.kernel.org/stable/c/9cae243b9ae25adfe468cd47ceca591f6725b79c · Patch
• https://osv.dev/vulnerability/AZL-76428 · Vendor Advisory
• https://git.kernel.org/stable/c/82b2bc279467c875ec36f8ef820f00997c2a4e8e · Patch
• https://ubuntu.com/security/CVE-2023-53685 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53685 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53685 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53685 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53685 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0473-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53685 · Vendor Advisory
• https://git.kernel.org/stable/c/0d20210a190f76db9ec35ee4e0fc77e6c7a148f5 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53685 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53685 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53685 · Vendor Advisory