PT-2025-52990 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2025-12-26 · CVE-2023-54033

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the LRU and LRU PERCPU hash maps within the Linux kernel. These maps allocate a new element on update before locking the target hash table bucket. If bucket locking fails, the maps return an error without releasing the allocated element, leading to untracked memory and potential -ENOMEM errors during subsequent LRU map updates. The issue occurs because the allocated element is not returned to either the free lists or the hash table, preventing its reuse.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54033

RHSA-2024:2394

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54033.json · Exploit
• https://cve.org/CVERecord?id=CVE-2023-54033 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54033 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54033 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54033 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54033 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54033 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54033 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54033 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2004666646728757723 · Twitter Post
• https://git.kernel.org/stable/c/1a9e80f757bbb1562d82e350afce2bb2f712cc3d · Note
• https://git.kernel.org/stable/c/79ea1a12fb9a8275b6e19d4ca625dd872dedcbb9 · Note
• https://lore.kernel.org/linux-cve-announce/2025122437-CVE-2023-54033-ad11@gregkh/T · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54033 · Note