PT-2025-49495 · Unknown+2 · Lvm2-Testsuite+2

Published 2023-01-30 · Updated 2026-04-20 · CVE-2023-53765

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc2 #19

Description The Linux kernel contains an issue within the dm cache component. Specifically, the background tracker's queued work is not properly freed in the btracker destroy function. This can lead to a kernel BUG when the kmem cache shutdown function is called, potentially causing system instability. The issue arises from incomplete cleanup of work objects associated with the background tracker. A test case using lvm2-testsuite, specifically the "cache-single-split.sh" script, was used to identify the problem.

Recommendations Update to a version newer than 6.0.0-rc2 #19.

Exploit

Fix

Stack Overflow

Buffer Overflow

Missing Release of Resource after Effective Lifetime

Weakness Enumeration

CWE-121

CWE-119

CWE-772

Related Identifiers

BDU:2026-01268

CVE-2023-53765

RHSA-2023:2458

RHSA-2023:7077

SUSE-SU-2026:0316-1

Affected Products

Debian

Linux Kernel

Lvm2-Testsuite

References · 338

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53765.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53765 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0316-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53765 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53765 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53765 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53765 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01268 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53765 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53765 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53765 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53765 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53765 · Vendor Advisory
• https://bugzilla.suse.com/1251738 · Note
• https://suse.com/security/cve/CVE-2022-50850 · Note