PT-2025-53044 · Linux · Linux Kernel

Published 2025-12-24 · Updated 2026-02-24 · CVE-2023-54046

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the crypto/essiv module. The essiv module incorrectly handles the EBUSY return value, potentially leading to a use-after-free condition when backlogged requests are processed. Specifically, the module only handles the EINPROGERSS return value, failing to properly free data associated with requests when EBUSY is returned by the caller, especially when the MAY BACKLOG flag is specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54046

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

References · 975

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54046.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54046 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54046 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54046 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54046 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54046 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54046 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54046 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54046 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://bugzilla.suse.com/1255996 · Note
• https://suse.com/security/cve/CVE-2023-54118 · Note