PT-2025-54065 · Linux+1 · Linux Kernel+1

Published 2023-03-27 · Updated 2026-02-24 · CVE-2023-54236

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:L/AC:H/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.8-1.el7.centos.x86 64 #1

Description The Linux kernel’s net failover component contains an issue where the transmission queue (txq) size can exceed the expected limit. Specifically, the failover txq is initialized with 16 queues. When a packet is transmitted, the system selects a queue based on the primary device’s configuration. If the primary device’s txq is larger than the default of 16, a warning message is generated, indicating that the selected queue number is out of range. This occurs because the system attempts to access a queue that does not exist. The issue is triggered when the primary device is up and running. The fix reduces the txq number to align with the non-existent primary device.

Recommendations Update to Linux kernel version 6.2.8-1.el7.centos.x86 64 #1 or a later version to resolve this issue.

Exploit

Fix

Weakness Enumeration

CWE-131

Related Identifiers

BDU:2026-02425

CVE-2023-54236

SUSE-SU-2026:0263-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Centos

Linux Kernel

References · 1115

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54236.json · Exploit
• https://bdu.fstec.ru/vul/2026-02425 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-54236 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54236 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54236 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0316-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54236 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54236 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54236 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54236 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory