PT-2025-53072 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2026-01-28 · CVE-2023-54074

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the net/mlx5e component. The problem stems from an incorrect encap attribute being used during invalidation, specifically in the mlx5e invalidate encap() function. This occurs because a commit did not modify this function, preventing it from correctly destroying modify header actions, leading to a warning message. The issue is related to the post action infrastructure and the use of the mlx5e tc get encap attr() helper function. The mlx5e tc attach mod hdr function is also implicated in the reported issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54074

RHSA-2023:6583

RHSA-2023:7077

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

Affected Products

Linux Kernel

Mlx5E

References · 851

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54074.json · Exploit
• https://ubuntu.com/security/CVE-2023-54074 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54074 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54074 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54074 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54074 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54074 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54074 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54074 · Security Note
• https://suse.com/security/cve/CVE-2023-53862 · Note
• https://bugzilla.suse.com/1255970 · Note
• https://suse.com/security/cve/CVE-2023-54025 · Note
• https://suse.com/security/cve/CVE-2023-54040 · Note