PT-2025-52961 · Linux+2 · Linux Kernel+2

Published 2025-12-24 · Updated 2025-12-26 · CVE-2023-54004

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained a null pointer dereference issue within the UDPLITE protocol handling, specifically in the sk mem raise allocated() function. This issue was identified through automated testing (syzbot) and addressed by ensuring proper memory allocation settings for UDPLITE, aligning it with the UDP protocol. The problem occurred during socket operations involving IPPROTO UDPLITE (0x88). The root cause was a missing initialization of the .memory allocated field, leading to a potential crash when accessing memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54004

RHSA-2023:6583

RHSA-2024:3138

Affected Products

Centos

Linux Kernel

Red Hat

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54004.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-54004 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54004 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54004 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54004 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54004 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54004 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54004 · Vendor Advisory
• https://docs.bell-sw.com/security/cves/CVE-2023-54004 · Note
• https://git.kernel.org/stable/c/7e3ae83371a4809da6fa3f10ccc430eecef3034a · Note
• https://git.kernel.org/stable/c/5014b64e369bdf997935b132a1ac4d64b6e47ad4 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/2a112f04629f7839e7cb509b27b8d3b735afe255 · Note
• https://git.kernel.org/stable/c/cc56de054d828935aa37734b479f82fa34b5f9bd · Note