PT-2025-54133 · Linux+3 · Linux Kernel+3

Published 2023-01-01 · Updated 2026-03-14 · CVE-2023-54287

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.1+g56321e101aca #1

Description The Linux kernel contains a flaw related to interrupt request handling in the tty serial driver for the imx platform. Specifically, pending USR interrupts may occur before the UART port is fully initialized, leading to a kernel panic when using the Jailhouse hypervisor. This issue arises when transitioning between Jailhouse cell states, where the second Linux console may not properly quiesce the UART before cell destruction, resulting in pending interrupts that trigger the problem upon cell restart. The fix involves disabling the Ageing Timer interrupt in UCR2, mirroring the existing behavior in UCR1.

Recommendations Update to Linux kernel version 6.1.1+g56321e101aca #1 or a later version to address this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-01192

CVE-2023-54287

SUSE-SU-2026:0263-1

SUSE-SU-2026:0317-1

SUSE-SU-2026:0411-1

SUSE-SU-2026:0473-1

SUSE-SU-2026:0617-1

Affected Products

Debian

Jailhouse

Linux Kernel

Imx

References · 1185

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54287.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54287 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54287 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-54287 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54287 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54287 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01192 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0317-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54287 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54287 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54287 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54287 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0473-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0617-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0411-1 · Vendor Advisory