PT-2025-49649 · Linux+2 · Linux Kernel+2

Published 2023-02-16 · Updated 2026-05-26 · CVE-2023-53789

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc2+ #89

Description The Linux kernel contains a flaw in the IOMMU/AMD subsystem related to page fault error reporting. If the IOMMU domain for a device group is not properly configured, a page fault may occur, leading to a NULL pointer dereference in the page fault handler. This can result in a kernel panic. The issue arises because the page fault handler assumes the domain is always set up, and when it is not, it attempts to access an invalid memory location.

Recommendations Update to Linux kernel version 6.2.0-rc2+ #89 or a later version to address this issue.

Exploit

Fix

Improper Resource Release

NULL Pointer Dereference

Weakness Enumeration

CWE-404

CWE-476

Related Identifiers

BDU:2026-01272

CVE-2023-53789

RHSA-2023:6583

Affected Products

Debian

Linux Kernel

Red Hat

References · 23

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53789.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-53789 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53789 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53789 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53789 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53789 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53789 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01272 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53789 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53789 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53789 · Security Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://access.redhat.com/security/cve/cve-2023-53789 · Note
• https://lore.kernel.org/linux-cve-announce/2025120940-CVE-2023-53789-c5cb@gregkh · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.16 · Note