PT-2025-54098 · Linux+2 · Linux Kernel+2

Published 2023-05-14 · Updated 2026-02-24 · CVE-2023-54269

Positive Technologies (AI Summary)

CVSS v2.0

5.4

Medium

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s SUNRPC implementation that could lead to a double-free condition of the xprt ctxt pointer while it is still in use. This occurs when an RPC request is deferred multiple times, potentially leading to a system crash. Specifically, when a request is deferred, the rq xprt ctxt pointer is moved, but not always cleared, resulting in a use-after-free scenario if the request is deferred again. The xpo release xprt function may then free the context prematurely, leading to issues when the deferred request is revisited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

BDU:2026-02426

CVE-2023-54269

RHSA-2023:6583

RHSA-2024:7000

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Centos

Linux Kernel

Red Hat

References · 980

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54269.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54269 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54269 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54269 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54269 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54269 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54269 · Security Note
• https://bdu.fstec.ru/vul/2026-02426 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54269 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54269 · Vendor Advisory
• https://suse.com/security/cve/CVE-2023-53862 · Note