CVE-2023-53790 — Missing Initialization of Resource in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
bpf: Zeroing allocated object from slab in bpf memory allocator
Currently the freed element in bpf memory allocator may be immediately
reused, for htab map the reuse will reinitialize special fields in map
value (e.g., bpf_spin_lock), but lookup procedure may still access
these special fields, and it may lead to hard-lockup as shown below:
NMI backtrace for cpu 16
CPU: 16 PID: 2574 Comm: htab.bin Tainted: G L 6.1.0+ #1
Hardwa…
Affected Packages4 packages
▶CVEListV5linux/linux0fd7c5d43339b783ee3301a05f925d1e52ac87c9 — 678ea18d6240299fd77d7000c8b1d7e5f274c8af+3
🔴Vulnerability Details
3OSV▶
CVE-2023-53790: In the Linux kernel, the following vulnerability has been resolved: bpf: Zeroing allocated object from slab in bpf memory allocator Currently the free↗2025-12-09
GHSA▶
GHSA-f32h-2m5f-x5c6: In the Linux kernel, the following vulnerability has been resolved:
bpf: Zeroing allocated object from slab in bpf memory allocator
Currently the fr↗2025-12-09