PT-2025-54022 · Linux · Linux Kernel

Published 2023-04-28 · Updated 2026-01-01 · CVE-2023-54193

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:L/AC:L/Au:M/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the net/sched subsystem related to the handling of traffic control blocks. Specifically, the error handler in tcf block bind() frees the cb list without first removing flow block cb instances from the driver list. This results in dangling pointers to freed objects within the driver list, leading to a use-after-free condition. The issue occurs during the deallocation of memory associated with block callbacks. A kernel crash was observed, as indicated by a KASAN (Kernel Address Sanitizer) report. The flow block cb setup simple function and tcf block offload cmd are involved in the vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-01206

CVE-2023-54193

Affected Products

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54193.json · Exploit
• https://ubuntu.com/security/CVE-2023-54193 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54193 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54193 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54193 · Security Note
• https://bdu.fstec.ru/vul/2026-01206 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54193 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54193 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54193 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54193 · Vendor Advisory
• https://git.kernel.org/stable/c/26aec72429a05e917d574eca0efc5306c63a8862 · Note
• https://lore.kernel.org/linux-cve-announce/2025123028-CVE-2023-54193-50c4@gregkh · Note
• https://git.kernel.org/stable/c/55866fe3fded3ce94ac3fc1bb3dfce654282f483 · Note
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.112 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note