PT-2025-49472 · Linux+1 · Linux Kernel+1

Published 2025-12-08 · Updated 2026-04-20 · CVE-2023-53742

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.15.78-android13-8-g63561175bbda-dirty through 5.15.78-android13-8-g63561175bbda-dirty

Description The Linux kernel contained an issue in kcsan where the use of READ ONCE() in read instrumented memory() could lead to a kernel paging request, specifically an alignment fault, on certain arm64 configurations. This occurred because READ ONCE() was promoted to a full atomic acquire instruction which is not supported on unaligned addresses. The issue was triggered by an inability to handle a kernel paging request at a specific virtual address, resulting in an internal error and a system crash. The fix avoids the use of READ ONCE() in read instrumented memory() by casting to a volatile type, ensuring the compiler performs the necessary access.

Recommendations Update to a newer version of the Linux kernel that contains the fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53742

Affected Products

Debian

Linux Kernel

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53742.json · Exploit
• https://ubuntu.com/security/CVE-2023-53742 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53742 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53742 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53742 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53742 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53742 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53742 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53742 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53742 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/1997863670592700822 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2023-53742 · Note
• https://git.kernel.org/linus/8dec88070d964bfeb4198f34cb5956d89dd1f557 · Note