PT-2025-53238 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2025-12-25 · CVE-2023-54161

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5

Description The Linux kernel contains a flaw in the unix stream sendpage() function related to a null-pointer dereference. This issue arises when handling sockets in a loop, potentially leading to a use-after-free condition during garbage collection. The vulnerability occurs when attempting to add data to the last socket buffer (skb) in the peer's receive queue without proper locking. This can happen if a socket's file descriptor (FD) is passed to another socket and subsequently closed without receiving the FD, creating a loop. The garbage collection process may unlink the skb with the FD from the socket's receive queue while unix stream sendpage() is attempting to access it, resulting in a crash.

Recommendations Update to version 6.5 or later.

Exploit

Related Identifiers

CVE-2023-54161

ECHO-EAAD-59C1-4494

Affected Products

Debian

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54161.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54161 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54161 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54161 · Security Note
• https://ubuntu.com/security/CVE-2023-54161 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54161 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54161 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54161 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54161 · Vendor Advisory
• https://git.kernel.org/stable/c/d39fc9b94dc0719afa4bc8e58341a5eb41febef3 · Note
• https://t.me/msrcreports/2792 · Telegram Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54161 · Note