PT-2025-53163 · Linux+1 · Linux Kernel+1

Published 2023-04-13 · Updated 2025-12-25 · CVE-2023-54086

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0 #4

Description The Linux kernel contained a flaw related to the handling of recursion checks within the Berkeley Packet Filter (BPF) subsystem. Specifically, the preempt count {sub,add} functions were called after the prog->active flag was decreased in bpf prog exit recur, leading to a potential kernel panic. The issue stemmed from insufficient protection of preempt count {sub,add} during trampoline attachment. The fix involves adding these functions to the BTF ID deny list.

Recommendations Update to a version of the Linux kernel newer than 6.2.0 #4.

Exploit

Fix

Uncontrolled Recursion

Improper Resource Release

Weakness Enumeration

CWE-674

CWE-404

Related Identifiers

BDU:2026-01237

CVE-2023-54086

Affected Products

Debian

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54086.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2023-54086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54086 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54086 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54086 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54086 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01237 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54086 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54086 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54086 · Security Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.113 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/c11bd046485d7bf1ca200db0e7d0bdc4bafdd395 · Note
• https://access.redhat.com/security/cve/cve-2023-54086 · Note
• https://git.kernel.org/stable/c/b9168d41b83d182f34ba927ee822edaee18d5fc8 · Note