PT-2025-49660 · Linux · Linux Kernel

Published 2025-12-09 · Updated 2025-12-10 · CVE-2023-53800

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc1-00003-g84fa3304a7fc-dirty

Description The Linux kernel contains a use-after-free issue within the UBI (Unsorted Block Images) subsystem. Specifically, the problem occurs during volume resizing. When ubi change vtbl record() returns an error within ubi resize volume(), memory associated with new eba tbl is freed, but it is still referenced by vol->eba tbl in ubi eba replace table(). This discrepancy in memory lifecycle leads to a use-after-free condition when volume resizing is attempted again. The issue was reported by KASAN, a kernel address sanitizer. The vulnerable function is ubi eba copy table().

Recommendations Update to a version of the Linux kernel newer than 6.1.0-rc1-00003-g84fa3304a7fc-dirty.

Exploit

Related Identifiers

CVE-2023-53800

Affected Products

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53800.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-53800 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53800 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53800 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53800 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53800 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53800 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53800 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53800 · Vendor Advisory
• https://git.kernel.org/stable/c/bf795ebbb9995e2fe7945de71177f01c2f1215dc · Note
• https://git.kernel.org/linus/9af31d6ec1a4be4caab2550096c6bd2ba8fba472 · Note
• https://git.kernel.org/stable/c/bf9875aa7f7d624a8c084425b14bf7e5907ebc30 · Note
• https://git.kernel.org/stable/c/9c8be1f165baee53b5a36ea0b3c9281d403a1d0b · Note
• https://git.kernel.org/stable/c/53818746e549e61841428892a8d94344494be797 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note