PT-2025-52991 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2025-12-26 · CVE-2023-54034

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A missing zero initialization exists in the iommufd component of the Linux kernel. Specifically, the vfio iommu type1 info structure is not fully initialized to zero before data is copied from user space. The copy from user() function does not fill the entire structure, leaving 8 bytes of padding uninitialized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54034

RHSA-2023:6583

Affected Products

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54034.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54034 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54034 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54034 · Security Note
• https://ubuntu.com/security/CVE-2023-54034 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54034 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54034 · Security Note
• https://git.kernel.org/stable/c/b3551ead616318ea155558cdbe7e91495b8d9b33 · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54034 · Note
• https://git.kernel.org/stable/c/7adcec686e4d699c169d34c722132b2bce5232cb · Note
• https://lore.kernel.org/linux-cve-announce/2025122438-CVE-2023-54034-3089@gregkh/T · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2004666645856313749 · Twitter Post