CVE-2023-53331 (GCVE-0-2023-53331)
Vulnerability from cvelistv5 – Published: 2025-09-16 16:12 – Updated: 2026-08-05 09:13
VLAI
EPSS
VEX
Title
pstore/ram: Check start of empty przs during init
Summary
In the Linux kernel, the following vulnerability has been resolved:
pstore/ram: Check start of empty przs during init
After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as
valid"), initialization would assume a prz was valid after seeing that
the buffer_size is zero (regardless of the buffer start position). This
unchecked start value means it could be outside the bounds of the buffer,
leading to future access panics when written to:
sysdump_panic_event+0x3b4/0x5b8
atomic_notifier_call_chain+0x54/0x90
panic+0x1c8/0x42c
die+0x29c/0x2a8
die_kernel_fault+0x68/0x78
__do_kernel_fault+0x1c4/0x1e0
do_bad_area+0x40/0x100
do_translation_fault+0x68/0x80
do_mem_abort+0x68/0xf8
el1_da+0x1c/0xc0
__raw_writeb+0x38/0x174
__memcpy_toio+0x40/0xac
persistent_ram_update+0x44/0x12c
persistent_ram_write+0x1a8/0x1b8
ramoops_pstore_write+0x198/0x1e8
pstore_console_write+0x94/0xe0
...
To avoid this, also check if the prz start is 0 during the initialization
phase. If not, the next prz sanity check case will discover it (start >
size) and zap the buffer back to a sane state.
[kees: update commit log with backtrace and clarifications]
Severity
7.8 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-01-14 18:30 UTC
CWE
- CWE-787 - Out-of-bounds Write
Assigner
References
9 references
Impacted products
2 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Linux | Linux |
Affected:
e1e3a46706bd4037e8b7407dc660ae6e05b8ac56 , < 89312657337e6e03ad6e9ea1a462bd9c158c85c8
(git)
Affected: 265242d82a3c6a8bd9120d06b4801f8d7ae9a346 , < c807ccdd812d18985860504b503899f3140a9549 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < e972231db29b5d1dccc13bf9d5ba55b6979a69ed (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < dc2f60de9a7d3efd982440117dab5579898d808c (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < fedecaeef88899d940b69368c996e8b3b0b8650d (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < e95d7a8a6edd14f8fab44c777dd7281db91f6ae2 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < f77990358628b01bdc03752126ff5f716ea37615 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < 25fb4e3402d46f425ec135ef6f09792a4c1b3003 (git) Affected: 30696378f68a9e3dad6bfe55938b112e72af00c2 , < fe8c3623ab06603eb760444a032d426542212021 (git) Affected: ec7f99261da9a20d63cbd273511a11a2efe698f2 (git) Affected: f250e4c562a3bd106575032666e9ef46f31231f8 (git) Affected: fffdbf586866e9500b53c9d4b061d3983720375a (git) Affected: 9e969ba431b46b1891c88cea36f722f3bfe8a180 (git) Affected: 4.14.96 , < 4.14.326 (semver) Affected: 4.19.18 , < 4.19.295 (semver) Affected: 3.18.133 , < 3.19 (semver) Affected: 4.4.172 , < 4.5 (semver) Affected: 4.9.153 , < 4.10 (semver) Affected: 4.20.5 , < 4.21 (semver) |
guessed | |
| Linux | Linux |
Affected:
5.0
Unaffected: 0 , < 5.0 (semver) Unaffected: 4.14.326 , ≤ 4.14.* (semver) Unaffected: 4.19.295 , ≤ 4.19.* (semver) Unaffected: 5.4.257 , ≤ 5.4.* (semver) Unaffected: 5.10.195 , ≤ 5.10.* (semver) Unaffected: 5.15.132 , ≤ 5.15.* (semver) Unaffected: 6.1.53 , ≤ 6.1.* (semver) Unaffected: 6.4.16 , ≤ 6.4.* (semver) Unaffected: 6.5.3 , ≤ 6.5.* (semver) Unaffected: 6.6 , ≤ * (original_commit_for_fix) |
guessed |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2023-53331",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-01-14T18:30:13.040006Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-787",
"description": "CWE-787 Out-of-bounds Write",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-14T18:32:59.884Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Linux",
"programFiles": [
"fs/pstore/ram_core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"lessThan": "89312657337e6e03ad6e9ea1a462bd9c158c85c8",
"status": "affected",
"version": "e1e3a46706bd4037e8b7407dc660ae6e05b8ac56",
"versionType": "git"
},
{
"lessThan": "c807ccdd812d18985860504b503899f3140a9549",
"status": "affected",
"version": "265242d82a3c6a8bd9120d06b4801f8d7ae9a346",
"versionType": "git"
},
{
"lessThan": "e972231db29b5d1dccc13bf9d5ba55b6979a69ed",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"lessThan": "dc2f60de9a7d3efd982440117dab5579898d808c",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"lessThan": "fedecaeef88899d940b69368c996e8b3b0b8650d",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"lessThan": "e95d7a8a6edd14f8fab44c777dd7281db91f6ae2",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"lessThan": "f77990358628b01bdc03752126ff5f716ea37615",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"lessThan": "25fb4e3402d46f425ec135ef6f09792a4c1b3003",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"lessThan": "fe8c3623ab06603eb760444a032d426542212021",
"status": "affected",
"version": "30696378f68a9e3dad6bfe55938b112e72af00c2",
"versionType": "git"
},
{
"status": "affected",
"version": "ec7f99261da9a20d63cbd273511a11a2efe698f2",
"versionType": "git"
},
{
"status": "affected",
"version": "f250e4c562a3bd106575032666e9ef46f31231f8",
"versionType": "git"
},
{
"status": "affected",
"version": "fffdbf586866e9500b53c9d4b061d3983720375a",
"versionType": "git"
},
{
"status": "affected",
"version": "9e969ba431b46b1891c88cea36f722f3bfe8a180",
"versionType": "git"
},
{
"lessThan": "4.14.326",
"status": "affected",
"version": "4.14.96",
"versionType": "semver"
},
{
"lessThan": "4.19.295",
"status": "affected",
"version": "4.19.18",
"versionType": "semver"
},
{
"lessThan": "3.19",
"status": "affected",
"version": "3.18.133",
"versionType": "semver"
},
{
"lessThan": "4.5",
"status": "affected",
"version": "4.4.172",
"versionType": "semver"
},
{
"lessThan": "4.10",
"status": "affected",
"version": "4.9.153",
"versionType": "semver"
},
{
"lessThan": "4.21",
"status": "affected",
"version": "4.20.5",
"versionType": "semver"
}
]
},
{
"defaultStatus": "affected",
"product": "Linux",
"programFiles": [
"fs/pstore/ram_core.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"versions": [
{
"status": "affected",
"version": "5.0"
},
{
"lessThan": "5.0",
"status": "unaffected",
"version": "0",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.14.*",
"status": "unaffected",
"version": "4.14.326",
"versionType": "semver"
},
{
"lessThanOrEqual": "4.19.*",
"status": "unaffected",
"version": "4.19.295",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.4.*",
"status": "unaffected",
"version": "5.4.257",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.10.*",
"status": "unaffected",
"version": "5.10.195",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.15.*",
"status": "unaffected",
"version": "5.15.132",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.*",
"status": "unaffected",
"version": "6.1.53",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.*",
"status": "unaffected",
"version": "6.4.16",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.5.*",
"status": "unaffected",
"version": "6.5.3",
"versionType": "semver"
},
{
"lessThanOrEqual": "*",
"status": "unaffected",
"version": "6.6",
"versionType": "original_commit_for_fix"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.14.326",
"versionStartIncluding": "4.14.96",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "4.19.295",
"versionStartIncluding": "4.19.18",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.4.257",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.10.195",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "5.15.132",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.1.53",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.4.16",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.5.3",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionEndExcluding": "6.6",
"versionStartIncluding": "5.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "3.18.133",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.4.172",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.9.153",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.20.5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\npstore/ram: Check start of empty przs during init\n\nAfter commit 30696378f68a (\"pstore/ram: Do not treat empty buffers as\nvalid\"), initialization would assume a prz was valid after seeing that\nthe buffer_size is zero (regardless of the buffer start position). This\nunchecked start value means it could be outside the bounds of the buffer,\nleading to future access panics when written to:\n\n sysdump_panic_event+0x3b4/0x5b8\n atomic_notifier_call_chain+0x54/0x90\n panic+0x1c8/0x42c\n die+0x29c/0x2a8\n die_kernel_fault+0x68/0x78\n __do_kernel_fault+0x1c4/0x1e0\n do_bad_area+0x40/0x100\n do_translation_fault+0x68/0x80\n do_mem_abort+0x68/0xf8\n el1_da+0x1c/0xc0\n __raw_writeb+0x38/0x174\n __memcpy_toio+0x40/0xac\n persistent_ram_update+0x44/0x12c\n persistent_ram_write+0x1a8/0x1b8\n ramoops_pstore_write+0x198/0x1e8\n pstore_console_write+0x94/0xe0\n ...\n\nTo avoid this, also check if the prz start is 0 during the initialization\nphase. If not, the next prz sanity check case will discover it (start \u003e\nsize) and zap the buffer back to a sane state.\n\n[kees: update commit log with backtrace and clarifications]"
}
],
"metrics": [
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"scenarios": [
{
"lang": "en",
"value": "AV:L - The vulnerable path is confined to local pstore/ramoops initialization and subsequent local writes (pstore console, `/dev/pmsg0` via `persistent_ram_write_user`, or other ramoops backends); there is no network or adjacent-radio entry point into `fs/pstore/ram_core.c`.\nAC:L - Once an empty-but-invalid prz header (valid sig, size 0, non-zero start) is present in persistent RAM\u2014observed in the field and retained across soft reboot on common Android/embedded ramoops deployments\u2014the next write deterministically performs an out-of-bounds update with no race or ASLR dependency; scored Low under the uncertainty/highest-severity rule.\nPR:L - In the highest-impact realistic deployment (Android/ChromeOS-style ramoops with pmsg enabled), an unprivileged local actor can trigger the write through `/dev/pmsg0` (kernel default 0220, often further relaxed on Android) or rely on automatic pstore console writes after boot, without needing real init-namespace root.\nUI:N - No victim action is required: after a vulnerable boot accept of the bad empty buffer, the kernel itself writes via the pstore console on printk/panic, or the attacker writes `/dev/pmsg0` directly.\nS:U - The out-of-bounds write corrupts addresses within the kernel\u2019s own ramoops mapping/security domain and does not cross a VM, IOMMU, or other separate authority boundary.\nC:H - This is an out-of-bounds write through `persistent_ram_update`/`_user` into memory past the logical buffer; per kernel scoring guidance such memory corruption is treated as enabling high confidentiality impact (information disclosure primitives), matching CWE-787 assessment of this CVE.\nI:H - The bug issues a attacker-influenced (pmsg) or kernel-sourced (console) out-of-bounds store via `memcpy_toio`/`copy_from_user` at a corrupted start offset, which is integrity-high memory corruption that can overwrite adjacent mapped persistent-RAM contents and is scored as exploitable for control-flow impact under the OOB-write rule.\nA:H - The demonstrated consequence is a kernel translation fault/oops during the out-of-bounds write (see the fix backtrace through `persistent_ram_write` \u2192 `__memcpy_toio`), which is a full availability loss."
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-05T09:13:32.268Z",
"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"shortName": "Linux"
},
"references": [
{
"url": "https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8"
},
{
"url": "https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549"
},
{
"url": "https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed"
},
{
"url": "https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c"
},
{
"url": "https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d"
},
{
"url": "https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2"
},
{
"url": "https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615"
},
{
"url": "https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003"
},
{
"url": "https://git.kernel.org/stable/c/fe8c3623ab06603eb760444a032d426542212021"
}
],
"title": "pstore/ram: Check start of empty przs during init",
"x_generator": {
"engine": "bippy-1.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"assignerShortName": "Linux",
"cveId": "CVE-2023-53331",
"datePublished": "2025-09-16T16:12:06.788Z",
"dateReserved": "2025-09-16T16:08:59.564Z",
"dateUpdated": "2026-08-05T09:13:32.268Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-53331",
"date": "2026-09-15",
"epss": "0.00157",
"percentile": "0.05246"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-53331\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-09-16T17:15:39.597\",\"lastModified\":\"2026-06-17T06:44:54.810\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\npstore/ram: Check start of empty przs during init\\n\\nAfter commit 30696378f68a (\\\"pstore/ram: Do not treat empty buffers as\\nvalid\\\"), initialization would assume a prz was valid after seeing that\\nthe buffer_size is zero (regardless of the buffer start position). This\\nunchecked start value means it could be outside the bounds of the buffer,\\nleading to future access panics when written to:\\n\\n sysdump_panic_event+0x3b4/0x5b8\\n atomic_notifier_call_chain+0x54/0x90\\n panic+0x1c8/0x42c\\n die+0x29c/0x2a8\\n die_kernel_fault+0x68/0x78\\n __do_kernel_fault+0x1c4/0x1e0\\n do_bad_area+0x40/0x100\\n do_translation_fault+0x68/0x80\\n do_mem_abort+0x68/0xf8\\n el1_da+0x1c/0xc0\\n __raw_writeb+0x38/0x174\\n __memcpy_toio+0x40/0xac\\n persistent_ram_update+0x44/0x12c\\n persistent_ram_write+0x1a8/0x1b8\\n ramoops_pstore_write+0x198/0x1e8\\n pstore_console_write+0x94/0xe0\\n ...\\n\\nTo avoid this, also check if the prz start is 0 during the initialization\\nphase. If not, the next prz sanity check case will discover it (start \u003e\\nsize) and zap the buffer back to a sane state.\\n\\n[kees: update commit log with backtrace and clarifications]\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/pstore/ram_core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"e1e3a46706bd4037e8b7407dc660ae6e05b8ac56\",\"lessThan\":\"89312657337e6e03ad6e9ea1a462bd9c158c85c8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"265242d82a3c6a8bd9120d06b4801f8d7ae9a346\",\"lessThan\":\"c807ccdd812d18985860504b503899f3140a9549\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"e972231db29b5d1dccc13bf9d5ba55b6979a69ed\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"dc2f60de9a7d3efd982440117dab5579898d808c\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"fedecaeef88899d940b69368c996e8b3b0b8650d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"e95d7a8a6edd14f8fab44c777dd7281db91f6ae2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"f77990358628b01bdc03752126ff5f716ea37615\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"25fb4e3402d46f425ec135ef6f09792a4c1b3003\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"30696378f68a9e3dad6bfe55938b112e72af00c2\",\"lessThan\":\"fe8c3623ab06603eb760444a032d426542212021\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"ec7f99261da9a20d63cbd273511a11a2efe698f2\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"f250e4c562a3bd106575032666e9ef46f31231f8\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"fffdbf586866e9500b53c9d4b061d3983720375a\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"9e969ba431b46b1891c88cea36f722f3bfe8a180\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"4.14.96\",\"lessThan\":\"4.14.326\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.18\",\"lessThan\":\"4.19.295\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"3.18.133\",\"lessThan\":\"3.19\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.4.172\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.9.153\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.20.5\",\"lessThan\":\"4.21\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/pstore/ram_core.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.0\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.0\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.14.326\",\"lessThanOrEqual\":\"4.14.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"4.19.295\",\"lessThanOrEqual\":\"4.19.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.4.257\",\"lessThanOrEqual\":\"5.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.195\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.132\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.53\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.4.16\",\"lessThanOrEqual\":\"6.4.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.5.3\",\"lessThanOrEqual\":\"6.5.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-01-14T18:30:13.040006Z\",\"id\":\"CVE-2023-53331\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]},{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-787\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"3.18.133\",\"versionEndExcluding\":\"3.19\",\"matchCriteriaId\":\"B31FDA7A-DC41-43BB-B4E9-262E778AD776\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.4.172\",\"versionEndExcluding\":\"4.5\",\"matchCriteriaId\":\"A22B7234-9290-41F2-A8B0-6782137A0E8A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.9.153\",\"versionEndExcluding\":\"4.10\",\"matchCriteriaId\":\"3544319C-62FE-4910-A23E-D511890F71D5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.14.96\",\"versionEndExcluding\":\"4.14.326\",\"matchCriteriaId\":\"646DCF0C-833B-4DD2-9AA4-0435A324483E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.19.18\",\"versionEndExcluding\":\"4.19.295\",\"matchCriteriaId\":\"FC273D3B-D471-48BE-BAD1-B3C2BCFE8974\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"4.20.5\",\"versionEndExcluding\":\"5.4.257\",\"matchCriteriaId\":\"90347FB9-24FE-4393-90AE-1DFAA1E8A27E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.5\",\"versionEndExcluding\":\"5.10.195\",\"matchCriteriaId\":\"C385B650-53DB-4BFB-83D1-1D8FADF653EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.11\",\"versionEndExcluding\":\"5.15.132\",\"matchCriteriaId\":\"5913891D-409A-4EEC-9231-F2EF5A493BC7\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.53\",\"matchCriteriaId\":\"B20754AF-3B8C-4574-A70D-EC24933810E5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.4.16\",\"matchCriteriaId\":\"C3039EA3-F6CA-43EF-9F17-81A7EC6841EF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.5\",\"versionEndExcluding\":\"6.5.3\",\"matchCriteriaId\":\"880C803A-BEAE-4DA0-8A59-AC023F7B4EE3\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fe8c3623ab06603eb760444a032d426542212021\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
"redhat_vex": {
"aggregate_severity": "Moderate",
"current_release_date": "2026-06-29T22:17:49+00:00",
"cve": "CVE-2023-53331",
"id": "CVE-2023-53331",
"initial_release_date": "2023-01-01T00:00:00+00:00",
"product_status:fixed": "1252",
"product_status:known_affected": "22",
"product_status:known_not_affected": "166",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "kernel: pstore/ram: Check start of empty przs during init",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53331.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "moderate",
"current_release_date": "2026-09-11T02:22:00Z",
"cve": "CVE-2023-53331",
"id": "CVE-2023-53331",
"initial_release_date": "2025-09-16T23:29:15Z",
"product_status:known_affected": "506",
"product_status:known_not_affected": "45",
"product_status:recommended": "582",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2023-53331",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53331.json",
"version": "52"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.8, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-53331\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-01-14T18:30:13.040006Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-01-14T18:30:07.671Z\"}}], \"cna\": {\"title\": \"pstore/ram: Check start of empty przs during init\", \"affected\": [{\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"e1e3a46706bd4037e8b7407dc660ae6e05b8ac56\", \"lessThan\": \"89312657337e6e03ad6e9ea1a462bd9c158c85c8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"265242d82a3c6a8bd9120d06b4801f8d7ae9a346\", \"lessThan\": \"c807ccdd812d18985860504b503899f3140a9549\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"e972231db29b5d1dccc13bf9d5ba55b6979a69ed\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"dc2f60de9a7d3efd982440117dab5579898d808c\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"fedecaeef88899d940b69368c996e8b3b0b8650d\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"e95d7a8a6edd14f8fab44c777dd7281db91f6ae2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"f77990358628b01bdc03752126ff5f716ea37615\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"25fb4e3402d46f425ec135ef6f09792a4c1b3003\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"30696378f68a9e3dad6bfe55938b112e72af00c2\", \"lessThan\": \"fe8c3623ab06603eb760444a032d426542212021\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"ec7f99261da9a20d63cbd273511a11a2efe698f2\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"f250e4c562a3bd106575032666e9ef46f31231f8\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"fffdbf586866e9500b53c9d4b061d3983720375a\", \"versionType\": \"git\"}, {\"status\": \"affected\", \"version\": \"9e969ba431b46b1891c88cea36f722f3bfe8a180\", \"versionType\": \"git\"}], \"programFiles\": [\"fs/pstore/ram_core.c\"], \"defaultStatus\": \"unaffected\"}, {\"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"product\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.0\"}, {\"status\": \"unaffected\", \"version\": \"0\", \"lessThan\": \"5.0\", \"versionType\": \"semver\"}, {\"status\": \"unaffected\", \"version\": \"4.14.326\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.14.*\"}, {\"status\": \"unaffected\", \"version\": \"4.19.295\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"4.19.*\"}, {\"status\": \"unaffected\", \"version\": \"5.4.257\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.*\"}, {\"status\": \"unaffected\", \"version\": \"5.10.195\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.10.*\"}, {\"status\": \"unaffected\", \"version\": \"5.15.132\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.15.*\"}, {\"status\": \"unaffected\", \"version\": \"6.1.53\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.*\"}, {\"status\": \"unaffected\", \"version\": \"6.4.16\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.*\"}, {\"status\": \"unaffected\", \"version\": \"6.5.3\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.5.*\"}, {\"status\": \"unaffected\", \"version\": \"6.6\", \"versionType\": \"original_commit_for_fix\", \"lessThanOrEqual\": \"*\"}], \"programFiles\": [\"fs/pstore/ram_core.c\"], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://git.kernel.org/stable/c/89312657337e6e03ad6e9ea1a462bd9c158c85c8\"}, {\"url\": \"https://git.kernel.org/stable/c/c807ccdd812d18985860504b503899f3140a9549\"}, {\"url\": \"https://git.kernel.org/stable/c/e972231db29b5d1dccc13bf9d5ba55b6979a69ed\"}, {\"url\": \"https://git.kernel.org/stable/c/dc2f60de9a7d3efd982440117dab5579898d808c\"}, {\"url\": \"https://git.kernel.org/stable/c/fedecaeef88899d940b69368c996e8b3b0b8650d\"}, {\"url\": \"https://git.kernel.org/stable/c/e95d7a8a6edd14f8fab44c777dd7281db91f6ae2\"}, {\"url\": \"https://git.kernel.org/stable/c/f77990358628b01bdc03752126ff5f716ea37615\"}, {\"url\": \"https://git.kernel.org/stable/c/25fb4e3402d46f425ec135ef6f09792a4c1b3003\"}, {\"url\": \"https://git.kernel.org/stable/c/fe8c3623ab06603eb760444a032d426542212021\"}], \"x_generator\": {\"engine\": \"bippy-1.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\npstore/ram: Check start of empty przs during init\\n\\nAfter commit 30696378f68a (\\\"pstore/ram: Do not treat empty buffers as\\nvalid\\\"), initialization would assume a prz was valid after seeing that\\nthe buffer_size is zero (regardless of the buffer start position). This\\nunchecked start value means it could be outside the bounds of the buffer,\\nleading to future access panics when written to:\\n\\n sysdump_panic_event+0x3b4/0x5b8\\n atomic_notifier_call_chain+0x54/0x90\\n panic+0x1c8/0x42c\\n die+0x29c/0x2a8\\n die_kernel_fault+0x68/0x78\\n __do_kernel_fault+0x1c4/0x1e0\\n do_bad_area+0x40/0x100\\n do_translation_fault+0x68/0x80\\n do_mem_abort+0x68/0xf8\\n el1_da+0x1c/0xc0\\n __raw_writeb+0x38/0x174\\n __memcpy_toio+0x40/0xac\\n persistent_ram_update+0x44/0x12c\\n persistent_ram_write+0x1a8/0x1b8\\n ramoops_pstore_write+0x198/0x1e8\\n pstore_console_write+0x94/0xe0\\n ...\\n\\nTo avoid this, also check if the prz start is 0 during the initialization\\nphase. If not, the next prz sanity check case will discover it (start \u003e\\nsize) and zap the buffer back to a sane state.\\n\\n[kees: update commit log with backtrace and clarifications]\"}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.14.326\", \"versionStartIncluding\": \"4.14.96\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"4.19.295\", \"versionStartIncluding\": \"4.19.18\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.4.257\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.10.195\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"5.15.132\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.1.53\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.4.16\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.5.3\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"6.6\", \"versionStartIncluding\": \"5.0\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"3.18.133\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.4.172\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.9.153\"}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionStartIncluding\": \"4.20.5\"}], \"operator\": \"OR\"}]}], \"providerMetadata\": {\"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\", \"dateUpdated\": \"2025-09-16T16:12:06.788Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-53331\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-14T18:32:59.884Z\", \"dateReserved\": \"2025-09-16T16:08:59.564Z\", \"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"datePublished\": \"2025-09-16T16:12:06.788Z\", \"assignerShortName\": \"Linux\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…