PT-2025-53996 · Linux+1 · Linux Kernel+1

Published 2025-12-30 · Updated 2026-01-07 · CVE-2023-54167

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the handling of initial ramdisks (initrd) on m68k platforms where physical memory does not start at address zero, such as on Amiga systems. Specifically, the phys to virt() function was being called before paging init(), which relies on m68k memoffset and module fixup(). This can lead to issues when accessing kernel memory at virtual addresses, potentially causing system instability. The issue is resolved by postponing the phys to virt() handling for the initial ramdisk until after paging init() is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-54167

Affected Products

Amiga Systems

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54167.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54167 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54167 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54167 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54167 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54167 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54167 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54167 · Vendor Advisory
• https://git.kernel.org/stable/c/ceb089e2337f810d3594d310953d9af4783f660a · Note
• https://git.kernel.org/stable/c/d4b97925e87eb133e400fe4a482d750c74ce392f · Note
• https://git.kernel.org/linus/d4b97925e87eb133e400fe4a482d750c74ce392f · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/58662cfb459150b9c0c22d20cddaea439b3844bd · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54167 · Note