PT-2025-54086 · Linux · Linux Kernel

Published 2023-04-13 · Updated 2026-01-07 · CVE-2023-54257

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.4.0 #28

Description The Linux kernel contains a flaw related to memory management within the macb (Multi-port Ethernet Controller with Buffer) driver in extended buffer descriptor mode. The issue manifests as a potential memory corruption, which can lead to system instability or failure. The problem was identified through debugging and reproducible with CONFIG DMA API DEBUG enabled, revealing issues with the rx dma. Specifically, the kernel may attempt to free DMA memory that it has not allocated, or exceed the maximum number of overlapping DMA mappings.

Recommendations Update to a newer version of the Linux kernel than 5.4.0 #28.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2026-04224

CVE-2023-54257

Affected Products

Linux Kernel

References · 29

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54257.json · Exploit
• https://ubuntu.com/security/CVE-2023-54257 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54257 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54257 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04224 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-54257 · Security Note
• https://osv.dev/vulnerability/CVE-2023-54257 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54257 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54257 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54257 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.12 · Note
• https://kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.281 · Note
• https://twitter.com/CVEnew/status/2005993855091720428 · Twitter Post
• https://git.kernel.org/stable/c/1bec9da233f779e7b6954ee07ad7e6d8f2a4dd83 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note