PT-2025-49750 · Linux+2 · Linux Kernel+2

Published 2023-01-01 · Updated 2026-03-14 · CVE-2023-53859

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc6-next-20230202 #4

Description The Linux kernel contains an issue where the arch cpu idle() function was not properly marked as 'noinstr', leading to a warning during tracing operations on the s390 architecture. This occurs when RCU (Read-Copy-Update) is not active for the function. The issue was identified through a warning message during kernel tracing and is related to the cpuidle subsystem. The fix involves marking the arch cpu idle() function as 'noinstr' to align with other architectures that have CONFIG ARCH WANTS NO INSTR enabled.

Recommendations Update to a version newer than 6.2.0-rc6-next-20230202 #4.

Exploit

Related Identifiers

CVE-2023-53859

RHSA-2025:6966

Affected Products

Debian

Linux Kernel

Red Hat

References · 19

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53859.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-53859 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53859 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53859 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53859 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53859 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53859 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53859 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53859 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53859 · Vendor Advisory
• https://git.kernel.org/stable/c/611c390217106c46e24e1af3db83187339d447ea · Note
• https://git.kernel.org/stable/c/49aa49952116b8fd56bfb1e8c69bce179f49bece · Note
• https://git.kernel.org/stable/c/fc60c4f12d8a056f20d8f4d0086a36c68ffa9fdc · Note
• https://lore.kernel.org/linux-cve-announce/2025120904-CVE-2023-53859-1c16@gregkh/T · Note
• https://twitter.com/CVEnew/status/1998225358030852554 · Twitter Post