PT-2025-54099 · Linux+1 · Linux Kernel+1

Published 2023-02-08 · Updated 2026-02-24 · CVE-2023-54270

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc3-15798-g5a41237ad1d4-dir8

Description The Linux kernel contains use-after-free (UAF) bugs in the media subsystem, specifically within the Siano USB driver, caused by the do submit urb() function. These bugs can lead to system instability or potential code execution. The issue is related to memory management during USB operations. Kernel Address Sanitizer (KASAN) reports indicate the presence of these bugs.

Recommendations Update to a version of the Linux kernel newer than 6.2.0-rc3-15798-g5a41237ad1d4-dir8.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-01199

CVE-2023-54270

RHSA-2023:6583

RHSA-2023:7077

RHSA-2024:0724

SUSE-SU-2026:0263-1

SUSE-SU-2026:0316-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0350-1

SUSE-SU-2026:0369-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0617-1

Affected Products

Linux Kernel

Siano Usb Driver

References · 1128

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54270.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54270 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54270 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54270 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54270 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0350-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0369-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54270 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01199 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54270 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0263-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54270 · Security Note