PT-2025-43109 · Linux+4 · Linux Kernel+4

Published 2023-08-21 · Updated 2025-12-04 · CVE-2023-53708

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to ACPI handling during system sleep state transitions (s2idle). Specifically, the kernel does not adequately handle multiple ACPI TYPE PACKAGE objects within firmware when evaluating the AMD LPS0 DSM function. This can lead to a memory leak if a maliciously crafted or poorly designed firmware presents such objects. The DSM function is part of the ACPI (Advanced Configuration and Power Interface) specification, which manages power and system resources.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

ALSA-2025_12746

ALSA-2025_12752

ALSA-2025_12753

ALSA-2025_16880

BDU:2026-01377

CVE-2023-53708

RHSA-2024:9315

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4111-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4139-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4149-1

SUSE-SU-2025:4301-1

SUSE-SU-2025:4320-1

Affected Products

Amd Lps0

Debian

Linux Kernel

Red Hat

Suse

References · 1314

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53708.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53708 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53708 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4111-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4320-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4149-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4139-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53708 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:21052-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53708 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4140-1 · Vendor Advisory