PT-2025-52998 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-01-28 · CVE-2023-54041

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists when removing provided buffers in the io uring functionality. Specifically, io buffer structs are not properly disposed of, leading to a memory leak. These structs are allocated in page-sized groups and require addition to a free list, such as io buffers cache, for proper management. The issue occurs because the necessary lock protection is not consistently maintained during buffer destruction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54041

RHSA-2023:6583

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

Affected Products

Linux Kernel

References · 851

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54041.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-54041 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54041 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54041 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54041 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54041 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54041 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54041 · Security Note
• https://ubuntu.com/security/CVE-2023-54041 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note
• https://bugzilla.suse.com/1255007 · Note
• https://suse.com/security/cve/CVE-2022-50718 · Note