PT-2025-53162 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2025-12-25 · CVE-2023-54085

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s MPTCP implementation. Specifically, a NULL pointer dereference can occur on fastopen early fallback. This happens when the system falls back to TCP early, and the subflow context is deleted before being returned to the caller. The fastopen path then attempts to access this deleted context, leading to the dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54085

RHSA-2023:6583

Affected Products

Linux Kernel

Red Hat

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54085.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2023-54085 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54085 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54085 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54085 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54085 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025122405-CVE-2023-54085-7e32@gregkh/T · Note
• https://git.kernel.org/stable/c/c0ff6f6da66a7791a32c0234388b1bdc00244917 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2004294868319731805 · Twitter Post
• https://git.kernel.org/stable/c/95135835519b0ab931c39908b2c99e9fb3c9068b · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54085 · Note