GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53065 (GCVE-0-2023-53065)

Vulnerability from cvelistv5 – Published: 2025-05-02 15:55 – Updated: 2026-08-05 09:12
VLAI
Title
perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output
Summary
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output syzkaller reportes a KASAN issue with stack-out-of-bounds. The call trace is as follows: dump_stack+0x9c/0xd3 print_address_description.constprop.0+0x19/0x170 __kasan_report.cold+0x6c/0x84 kasan_report+0x3a/0x50 __perf_event_header__init_id+0x34/0x290 perf_event_header__init_id+0x48/0x60 perf_output_begin+0x4a4/0x560 perf_event_bpf_output+0x161/0x1e0 perf_iterate_sb_cpu+0x29e/0x340 perf_iterate_sb+0x4c/0xc0 perf_event_bpf_event+0x194/0x2c0 __bpf_prog_put.constprop.0+0x55/0xf0 __cls_bpf_delete_prog+0xea/0x120 [cls_bpf] cls_bpf_delete_prog_work+0x1c/0x30 [cls_bpf] process_one_work+0x3c2/0x730 worker_thread+0x93/0x650 kthread+0x1b8/0x210 ret_from_fork+0x1f/0x30 commit 267fb27352b6 ("perf: Reduce stack usage of perf_output_begin()") use on-stack struct perf_sample_data of the caller function. However, perf_event_bpf_output uses incorrect parameter to convert small-sized data (struct perf_bpf_event) into large-sized data (struct perf_sample_data), which causes memory overwriting occurs in __perf_event_header__init_id.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 267fb27352b6fc9fdbad753127a239f75618ecbc , < ddcf8320003638a06eb1e46412e045d0c5701575 (git)
Affected: 267fb27352b6fc9fdbad753127a239f75618ecbc , < ac5f88642cb211152041f84a985309e9af4baf59 (git)
Affected: 267fb27352b6fc9fdbad753127a239f75618ecbc , < ff8137727a2af4ad5f6e6c8b9f7ec5e8db9da86c (git)
Affected: 267fb27352b6fc9fdbad753127a239f75618ecbc , < 3a776fddb4e5598c8bfcd4ad094fba34f9856fc9 (git)
Affected: 267fb27352b6fc9fdbad753127a239f75618ecbc , < eb81a2ed4f52be831c9fb879752d89645a312c13 (git)
guessed Create a notification for this product.
Linux Linux Affected: 5.10
Unaffected: 0 , < 5.10 (semver)
Unaffected: 5.10.177 , ≤ 5.10.* (semver)
Unaffected: 5.15.105 , ≤ 5.15.* (semver)
Unaffected: 6.1.22 , ≤ 6.1.* (semver)
Unaffected: 6.2.9 , ≤ 6.2.* (semver)
Unaffected: 6.3 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/events/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ddcf8320003638a06eb1e46412e045d0c5701575",
              "status": "affected",
              "version": "267fb27352b6fc9fdbad753127a239f75618ecbc",
              "versionType": "git"
            },
            {
              "lessThan": "ac5f88642cb211152041f84a985309e9af4baf59",
              "status": "affected",
              "version": "267fb27352b6fc9fdbad753127a239f75618ecbc",
              "versionType": "git"
            },
            {
              "lessThan": "ff8137727a2af4ad5f6e6c8b9f7ec5e8db9da86c",
              "status": "affected",
              "version": "267fb27352b6fc9fdbad753127a239f75618ecbc",
              "versionType": "git"
            },
            {
              "lessThan": "3a776fddb4e5598c8bfcd4ad094fba34f9856fc9",
              "status": "affected",
              "version": "267fb27352b6fc9fdbad753127a239f75618ecbc",
              "versionType": "git"
            },
            {
              "lessThan": "eb81a2ed4f52be831c9fb879752d89645a312c13",
              "status": "affected",
              "version": "267fb27352b6fc9fdbad753127a239f75618ecbc",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/events/core.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.10"
            },
            {
              "lessThan": "5.10",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.177",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.105",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.22",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.9",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.177",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.105",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.22",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.9",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "5.10",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output\n\nsyzkaller reportes a KASAN issue with stack-out-of-bounds.\nThe call trace is as follows:\n  dump_stack+0x9c/0xd3\n  print_address_description.constprop.0+0x19/0x170\n  __kasan_report.cold+0x6c/0x84\n  kasan_report+0x3a/0x50\n  __perf_event_header__init_id+0x34/0x290\n  perf_event_header__init_id+0x48/0x60\n  perf_output_begin+0x4a4/0x560\n  perf_event_bpf_output+0x161/0x1e0\n  perf_iterate_sb_cpu+0x29e/0x340\n  perf_iterate_sb+0x4c/0xc0\n  perf_event_bpf_event+0x194/0x2c0\n  __bpf_prog_put.constprop.0+0x55/0xf0\n  __cls_bpf_delete_prog+0xea/0x120 [cls_bpf]\n  cls_bpf_delete_prog_work+0x1c/0x30 [cls_bpf]\n  process_one_work+0x3c2/0x730\n  worker_thread+0x93/0x650\n  kthread+0x1b8/0x210\n  ret_from_fork+0x1f/0x30\n\ncommit 267fb27352b6 (\"perf: Reduce stack usage of perf_output_begin()\")\nuse on-stack struct perf_sample_data of the caller function.\n\nHowever, perf_event_bpf_output uses incorrect parameter to convert\nsmall-sized data (struct perf_bpf_event) into large-sized data\n(struct perf_sample_data), which causes memory overwriting occurs in\n__perf_event_header__init_id."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The bug is reached via local perf_event_open (CPU-wide bpf_event sideband) plus a local BPF unload/load trigger (bpf() or tc cls_bpf netlink); there is no network-facing path into perf_event_bpf_output.\nAC:L - An attacker who opens the bpf_event with sample_id_all, maps a small ring buffer, stops consuming it to force rb-\u003elost, then loads/unloads a BPF program reliably hits the LOST path that performs the stack overflow; no attacker-uncontrollable race or layout is required.\nPR:L - Opening the required CPU-wide bpf_event needs CAP_PERFMON (perf_allow_cpu), and triggering BPF unload needs CAP_BPF or userns-reachable CAP_NET_ADMIN for tc/cls_bpf; these are delegatable non-root capabilities routinely granted to observability agents/containers, matching established PR:L scoring for CAP_PERFMON/CAP_BPF bugs.\nUI:N - The attacker opens the perf event, fills the ring buffer, and triggers BPF program unload entirely from their own processes; no separate victim action is required.\nS:U - The stack corruption and any resulting privilege escalation occur within the host kernel\u2019s security authority and do not cross a VM, IOMMU, or sandbox boundary.\nC:H - This is an attacker-influenced kernel stack out-of-bounds write (perf_bpf_event treated as the much larger perf_sample_data); such memory corruption can be leveraged for arbitrary kernel read primitives.\nI:H - Overflowing past the on-stack perf_bpf_event in perf_event_bpf_event smashes saved frame/return state under attacker-controlled sample_type write patterns, enabling control-flow hijack and arbitrary kernel write/code execution.\nA:H - The same stack-out-of-bounds write KASAN reported causes kernel oops/panic even when not fully weaponized, which is High availability impact."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:12:35.911Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ddcf8320003638a06eb1e46412e045d0c5701575"
        },
        {
          "url": "https://git.kernel.org/stable/c/ac5f88642cb211152041f84a985309e9af4baf59"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff8137727a2af4ad5f6e6c8b9f7ec5e8db9da86c"
        },
        {
          "url": "https://git.kernel.org/stable/c/3a776fddb4e5598c8bfcd4ad094fba34f9856fc9"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb81a2ed4f52be831c9fb879752d89645a312c13"
        }
      ],
      "title": "perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53065",
    "datePublished": "2025-05-02T15:55:18.789Z",
    "dateReserved": "2025-05-02T15:51:43.548Z",
    "dateUpdated": "2026-08-05T09:12:35.911Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53065",
      "date": "2026-09-16",
      "epss": "0.00204",
      "percentile": "0.10544"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53065\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-05-02T16:15:25.580\",\"lastModified\":\"2026-08-04T10:18:53.670\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nperf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output\\n\\nsyzkaller reportes a KASAN issue with stack-out-of-bounds.\\nThe call trace is as follows:\\n  dump_stack+0x9c/0xd3\\n  print_address_description.constprop.0+0x19/0x170\\n  __kasan_report.cold+0x6c/0x84\\n  kasan_report+0x3a/0x50\\n  __perf_event_header__init_id+0x34/0x290\\n  perf_event_header__init_id+0x48/0x60\\n  perf_output_begin+0x4a4/0x560\\n  perf_event_bpf_output+0x161/0x1e0\\n  perf_iterate_sb_cpu+0x29e/0x340\\n  perf_iterate_sb+0x4c/0xc0\\n  perf_event_bpf_event+0x194/0x2c0\\n  __bpf_prog_put.constprop.0+0x55/0xf0\\n  __cls_bpf_delete_prog+0xea/0x120 [cls_bpf]\\n  cls_bpf_delete_prog_work+0x1c/0x30 [cls_bpf]\\n  process_one_work+0x3c2/0x730\\n  worker_thread+0x93/0x650\\n  kthread+0x1b8/0x210\\n  ret_from_fork+0x1f/0x30\\n\\ncommit 267fb27352b6 (\\\"perf: Reduce stack usage of perf_output_begin()\\\")\\nuse on-stack struct perf_sample_data of the caller function.\\n\\nHowever, perf_event_bpf_output uses incorrect parameter to convert\\nsmall-sized data (struct perf_bpf_event) into large-sized data\\n(struct perf_sample_data), which causes memory overwriting occurs in\\n__perf_event_header__init_id.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: perf/core: Se solucion\u00f3 que el par\u00e1metro perf_output_begin se invocara incorrectamente en perf_event_bpf_output syzkaller informa un problema de KASAN con una pila fuera de los l\u00edmites. El seguimiento de la llamada es el siguiente: dump_stack+0x9c/0xd3 print_address_description.constprop.0+0x19/0x170 __kasan_report.cold+0x6c/0x84 kasan_report+0x3a/0x50 __perf_event_header__init_id+0x34/0x290 perf_event_header__init_id+0x48/0x60 perf_output_begin+0x4a4/0x560 perf_event_bpf_output+0x161/0x1e0 perf_iterate_sb_cpu+0x29e/0x340 perf_iterate_sb+0x4c/0xc0 perf_event_bpf_event+0x194/0x2c0 __bpf_prog_put.constprop.0+0x55/0xf0 __cls_bpf_delete_prog+0xea/0x120 [cls_bpf] cls_bpf_delete_prog_work+0x1c/0x30 [cls_bpf] process_one_work+0x3c2/0x730 workers_thread+0x93/0x650 kthread+0x1b8/0x210 ret_from_fork+0x1f/0x30 commit 267fb27352b6 (\\\"perf: Reducir el uso de la pila de perf_output_begin()\\\") usa la estructura en pila perf_sample_data de la funci\u00f3n que llama. Sin embargo, perf_event_bpf_output utiliza un par\u00e1metro incorrecto para convertir datos de tama\u00f1o peque\u00f1o (struct perf_bpf_event) en datos de tama\u00f1o grande (struct perf_sample_data), lo que provoca que se sobrescriba la memoria en __perf_event_header__init_id.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"kernel/events/core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"267fb27352b6fc9fdbad753127a239f75618ecbc\",\"lessThan\":\"ddcf8320003638a06eb1e46412e045d0c5701575\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"267fb27352b6fc9fdbad753127a239f75618ecbc\",\"lessThan\":\"ac5f88642cb211152041f84a985309e9af4baf59\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"267fb27352b6fc9fdbad753127a239f75618ecbc\",\"lessThan\":\"ff8137727a2af4ad5f6e6c8b9f7ec5e8db9da86c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"267fb27352b6fc9fdbad753127a239f75618ecbc\",\"lessThan\":\"3a776fddb4e5598c8bfcd4ad094fba34f9856fc9\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"267fb27352b6fc9fdbad753127a239f75618ecbc\",\"lessThan\":\"eb81a2ed4f52be831c9fb879752d89645a312c13\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"kernel/events/core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.10\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.10\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.177\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.105\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.22\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.2.9\",\"lessThanOrEqual\":\"6.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.3\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.10.1\",\"versionEndExcluding\":\"5.10.177\",\"matchCriteriaId\":\"84F0FAD5-4CB0-4909-AA55-E4A409395D9F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.105\",\"matchCriteriaId\":\"0888AE70-CB0A-45C0-B9BD-A5371244C8DB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.22\",\"matchCriteriaId\":\"642B6F99-95C6-47F5-A9B1-5C45FE08CAD0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.2.9\",\"matchCriteriaId\":\"914F22DD-1E6F-4B0A-A14D-3A9F068F6761\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.10:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"B29EBB93-107F-4ED6-8DE3-C2732BC659C3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.10:rc4:*:*:*:*:*:*\",\"matchCriteriaId\":\"0CD159FA-170F-4389-9085-CACCF97ABB1E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.10:rc5:*:*:*:*:*:*\",\"matchCriteriaId\":\"F0390D83-6C17-4557-BE8D-B659E04F565A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.10:rc6:*:*:*:*:*:*\",\"matchCriteriaId\":\"4120E4B3-B66D-4ACE-8570-1DD4DF20A324\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:5.10:rc7:*:*:*:*:*:*\",\"matchCriteriaId\":\"73D60343-647D-4B5D-AA6D-CE87C462E368\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.3:rc1:*:*:*:*:*:*\",\"matchCriteriaId\":\"B8E3B0E8-FA27-4305-87BB-AF6C25B160CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:6.3:rc2:*:*:*:*:*:*\",\"matchCriteriaId\":\"A47F0FC3-CE52-4BA1-BA51-22F783938431\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/3a776fddb4e5598c8bfcd4ad094fba34f9856fc9\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ac5f88642cb211152041f84a985309e9af4baf59\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ddcf8320003638a06eb1e46412e045d0c5701575\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/eb81a2ed4f52be831c9fb879752d89645a312c13\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ff8137727a2af4ad5f6e6c8b9f7ec5e8db9da86c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-04T19:21:46+00:00",
      "cve": "CVE-2023-53065",
      "id": "CVE-2023-53065",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53065.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-31T01:01:38Z",
      "cve": "CVE-2023-53065",
      "id": "CVE-2023-53065",
      "initial_release_date": "2025-05-03T02:51:22Z",
      "product_status:known_affected": "339",
      "product_status:known_not_affected": "384",
      "product_status:recommended": "243",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53065",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53065.json",
      "version": "33"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.