Skip to content
Fencer Vulns
high 7.8

CVE-2023-53331 json

pstore/ram: Check start of empty przs during init

published 2025-09-16 13 mo ago modified 2026-08-05 3 mo ago also EUVD-2023-59930

cvss
7.8
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 5%
public exploits
0
none known

Summary

In the Linux kernel, the following vulnerability has been resolved:

pstore/ram: Check start of empty przs during init

After commit 30696378f68a ("pstore/ram: Do not treat empty buffers as valid"), initialization would assume a prz was valid after seeing that the buffer_size is zero (regardless of the buffer start position). This unchecked start value means it could be outside the bounds of the buffer, leading to future access panics when written to:

sysdump_panic_event+0x3b4/0x5b8 atomic_notifier_call_chain+0x54/0x90 panic+0x1c8/0x42c die+0x29c/0x2a8 die_kernel_fault+0x68/0x78 __do_kernel_fault+0x1c4/0x1e0 do_bad_area+0x40/0x100 do_translation_fault+0x68/0x80 do_mem_abort+0x68/0xf8 el1_da+0x1c/0xc0 __raw_writeb+0x38/0x174 __memcpy_toio+0x40/0xac persistent_ram_update+0x44/0x12c persistent_ram_write+0x1a8/0x1b8 ramoops_pstore_write+0x198/0x1e8 pstore_console_write+0x94/0xe0 ...

To avoid this, also check if the prz start is 0 during the initialization phase. If not, the next prz sanity check case will discover it (start > size) and zap the buffer back to a sane state.

[kees: update commit log with backtrace and clarifications]

Patch / fix

  • Linux Linux 3.19, 4.5, 4.10, 4.14.326, 4.19.295, 4.21, 5.4.257, 5.10.195, 5.15.132, 6.1.53, 6.4.16, 6.5.3, 6.6
  • linux Debian 12 6.1.55-1
  • linux Debian 14, Debian 13 6.5.3-1

debian advisories DEBIAN-CVE-2023-53331

  • linux Ubuntu 20.04 LTS 5.4.0-169.187
  • linux Ubuntu 22.04 LTS 5.15.0-94.104
  • linux-aws Ubuntu 20.04 LTS 5.4.0-1116.126
  • linux-aws Ubuntu 22.04 LTS 5.15.0-1053.58
  • linux-gcp Ubuntu 20.04 LTS 5.4.0-1120.129
  • linux-gcp Ubuntu 22.04 LTS 5.15.0-1051.59
  • linux-gke Ubuntu 22.04 LTS 5.15.0-1050.55
  • linux-ibm Ubuntu 20.04 LTS 5.4.0-1063.68

ubuntu advisories UBUNTU-CVE-2023-53331

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • kernel RHEL 9 5.14.0-611.7.1.el9_7
  • rv RHEL 9 5.14.0-611.7.1.el9_7
  • perf RHEL 9 5.14.0-611.7.1.el9_7
  • rtla RHEL 9 5.14.0-611.7.1.el9_7
  • libperf RHEL 9 5.14.0-611.7.1.el9_7
  • kernel-rt RHEL 9 5.14.0-611.7.1.el9_7
  • kernel-64k RHEL 9 5.14.0-611.7.1.el9_7
  • kernel-core RHEL 9 5.14.0-611.7.1.el9_7

red hat advisories RHSA-2025:21136RHSA-2025:21128RHSA-2025:21112RHSA-2025:21091RHSA-2025:21051RHSA-2025:19886

  • kernel-rt Real Time Module 15 SP7 6.4.0-150700.7.22.1
  • kernel-syms-rt Real Time Module 15 SP7 6.4.0-150700.7.22.1
  • kernel-source-rt Real Time Module 15 SP7 6.4.0-150700.7.22.1
  • kernel-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.18.1
  • kernel-syms-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.18.1
  • kernel-source-azure SLE Module for Public Cloud 15 SP7 6.4.0-150700.20.18.1
  • kernel-64kb SLE Module for Basesystem 15 SP7 6.4.0-150700.53.22.1
  • kernel-syms SLE Module for Development Tools 15 SP7 6.4.0-150700.53.22.1

suse advisories SUSE-SU-2025:4141-1SUSE-SU-2025:4132-1SUSE-SU-2025:4057-1SUSE-SU-2025:20870-1SUSE-SU-2025:3761-1SUSE-SU-2025:20898-1

  • kernel Rocky Linux 9 5.14.0-570.58.1.el9_6

rocky linux advisories RLSA-2025:19105

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2023-53331 updated cvss 7.0

kernel: pstore/ram: Check start of empty przs during init

  • Red Hat Enterprise Linux 9 kernel-rt, kernel-rt-kvm, kernel-rt-core, kernel-rt-modules, kernel-rt-debug-kvm, kernel-rt-debug-core, +12 more
    affected: workaround, no fix available
  • Red Hat CodeReady Linux Builder EUS (v.9.4) libperf 5.14.0-427.97.1.el9_4, kernel-debuginfo-common-s390x 5.14.0-427.97.1.el9_4, kernel-debuginfo-common-x86_64 5.14.0-427.97.1.el9_4, kernel-debuginfo-common-aarch64 5.14.0-427.97.1.el9_4, kernel-debuginfo-common-ppc64le 5.14.0-427.97.1.el9_4
    fixed: vendor fix RHSA-2025:19886
  • Red Hat Enterprise Linux AppStream (v. 9) rv 5.14.0-611.7.1.el9_7, rv 5.14.0-570.58.1.el9_6, perf 5.14.0-611.7.1.el9_7, rtla 5.14.0-611.7.1.el9_7, perf 5.14.0-570.58.1.el9_6, rtla 5.14.0-570.58.1.el9_6, +20 more
    fixed: vendor fix RHSA-2025:19105
  • Red Hat Enterprise Linux AppStream E4S (v.9.0) perf 5.14.0-70.153.1.el9_0, kernel-devel-matched 5.14.0-70.153.1.el9_0, kernel-debug-devel-matched 5.14.0-70.153.1.el9_0, kernel-debuginfo-common-s390x 5.14.0-70.153.1.el9_0, kernel-zfcpdump-devel-matched 5.14.0-70.153.1.el9_0, kernel-debuginfo-common-x86_64 5.14.0-70.153.1.el9_0, +2 more
    fixed: vendor fix RHSA-2025:21091
  • Red Hat Enterprise Linux AppStream E4S (v.9.2) perf 5.14.0-284.146.1.el9_2, rtla 5.14.0-284.146.1.el9_2, kernel-devel-matched 5.14.0-284.146.1.el9_2, kernel-64k-devel-matched 5.14.0-284.146.1.el9_2, kernel-debug-devel-matched 5.14.0-284.146.1.el9_2, kernel-debuginfo-common-s390x 5.14.0-284.146.1.el9_2, +5 more
    fixed: vendor fix RHSA-2025:21051
  • Red Hat Enterprise Linux AppStream EUS (v.9.4) rv 5.14.0-427.97.1.el9_4, perf 5.14.0-427.97.1.el9_4, rtla 5.14.0-427.97.1.el9_4, kernel-devel-matched 5.14.0-427.97.1.el9_4, kernel-64k-devel-matched 5.14.0-427.97.1.el9_4, kernel-debug-devel-matched 5.14.0-427.97.1.el9_4, +6 more
    fixed: vendor fix RHSA-2025:19886
  • Red Hat Enterprise Linux BaseOS (v. 9) kernel 5.14.0-611.7.1.el9_7, kernel 5.14.0-570.58.1.el9_6, kernel-64k 5.14.0-611.7.1.el9_7, kernel-64k 5.14.0-570.58.1.el9_6, kernel-core 5.14.0-611.7.1.el9_7, kernel-core 5.14.0-570.58.1.el9_6, +60 more
    fixed: vendor fix RHSA-2025:19105
  • Red Hat Enterprise Linux BaseOS E4S (v.9.0) kernel 5.14.0-70.153.1.el9_0, bpftool 5.14.0-70.153.1.el9_0, kernel-core 5.14.0-70.153.1.el9_0, kernel-tools 5.14.0-70.153.1.el9_0, python3-perf 5.14.0-70.153.1.el9_0, kernel-modules 5.14.0-70.153.1.el9_0, +14 more
    fixed: vendor fix RHSA-2025:21091
show 12 more
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2) bpftool 7.0.0-284.146.1.el9_2, kernel 5.14.0-284.146.1.el9_2, kernel-64k 5.14.0-284.146.1.el9_2, kernel-core 5.14.0-284.146.1.el9_2, kernel-tools 5.14.0-284.146.1.el9_2, python3-perf 5.14.0-284.146.1.el9_2, +28 more
    fixed: vendor fix RHSA-2025:21051
  • Red Hat Enterprise Linux BaseOS EUS (v.9.4) bpftool 7.3.0-427.97.1.el9_4, kernel 5.14.0-427.97.1.el9_4, kernel-64k 5.14.0-427.97.1.el9_4, kernel-core 5.14.0-427.97.1.el9_4, kernel-tools 5.14.0-427.97.1.el9_4, python3-perf 5.14.0-427.97.1.el9_4, +28 more
    fixed: vendor fix RHSA-2025:19886
  • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) libperf 5.14.0-611.7.1.el9_7, libperf 5.14.0-570.58.1.el9_6, kernel-debuginfo-common-s390x 5.14.0-611.7.1.el9_7, kernel-debuginfo-common-s390x 5.14.0-570.58.1.el9_6, kernel-debuginfo-common-x86_64 5.14.0-611.7.1.el9_7, kernel-debuginfo-common-aarch64 5.14.0-611.7.1.el9_7, +4 more
    fixed: vendor fix RHSA-2025:19105
  • Red Hat Enterprise Linux NFV E4S (v.9.0) kernel-rt 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-kvm 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-core 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-modules 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-debug-kvm 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-debug-core 5.14.0-70.153.1.rt21.225.el9_0, +4 more
    fixed: vendor fix RHSA-2025:21136
  • Red Hat Enterprise Linux Real Time (v. 9) kernel-rt 5.14.0-611.7.1.el9_7, kernel-rt 5.14.0-570.58.1.el9_6, kernel-rt-64k 5.14.0-611.7.1.el9_7, kernel-rt-64k 5.14.0-570.58.1.el9_6, kernel-rt-core 5.14.0-611.7.1.el9_7, kernel-rt-core 5.14.0-570.58.1.el9_6, +34 more
    fixed: vendor fix RHSA-2025:19105
  • Red Hat Enterprise Linux Real Time E4S (v.9.0) kernel-rt 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-core 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-modules 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-debug-core 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-debug-modules 5.14.0-70.153.1.rt21.225.el9_0, kernel-rt-modules-extra 5.14.0-70.153.1.rt21.225.el9_0, +2 more
    fixed: vendor fix RHSA-2025:21136
  • Red Hat Enterprise Linux Real Time E4S (v.9.2) kernel-rt 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-core 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-modules 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-debug-core 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-modules-core 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-debug-modules 5.14.0-284.146.1.rt14.431.el9_2, +4 more
    fixed: vendor fix RHSA-2025:21128
  • Red Hat Enterprise Linux Real Time EUS (v.9.4) kernel-rt 5.14.0-427.97.1.el9_4, kernel-rt-core 5.14.0-427.97.1.el9_4, kernel-rt-modules 5.14.0-427.97.1.el9_4, kernel-rt-debug-core 5.14.0-427.97.1.el9_4, kernel-rt-modules-core 5.14.0-427.97.1.el9_4, kernel-rt-debug-modules 5.14.0-427.97.1.el9_4, +4 more
    fixed: vendor fix RHSA-2025:19886
  • Red Hat Enterprise Linux Real Time for NFV (v. 9) kernel-rt 5.14.0-611.7.1.el9_7, kernel-rt 5.14.0-570.58.1.el9_6, kernel-rt-core 5.14.0-611.7.1.el9_7, kernel-rt-kvm 5.14.0-570.58.1.el9_6, kernel-rt-core 5.14.0-570.58.1.el9_6, kernel-rt-modules 5.14.0-611.7.1.el9_7, +16 more
    fixed: vendor fix RHSA-2025:19105
  • Red Hat Enterprise Linux Real Time for NFV E4S (v.9.2) kernel-rt 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-kvm 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-core 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-modules 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-debug-kvm 5.14.0-284.146.1.rt14.431.el9_2, kernel-rt-debug-core 5.14.0-284.146.1.rt14.431.el9_2, +6 more
    fixed: vendor fix RHSA-2025:21128
  • Red Hat Enterprise Linux Real Time for NFV EUS (v.9.4) kernel-rt 5.14.0-427.97.1.el9_4, kernel-rt-kvm 5.14.0-427.97.1.el9_4, kernel-rt-core 5.14.0-427.97.1.el9_4, kernel-rt-modules 5.14.0-427.97.1.el9_4, kernel-rt-debug-kvm 5.14.0-427.97.1.el9_4, kernel-rt-debug-core 5.14.0-427.97.1.el9_4, +6 more
    fixed: vendor fix RHSA-2025:19886
  • Red Hat Enterprise Linux 6 perf, kernel, python-perf, kernel-kdump, kernel-firmware, kernel-bootwrapper, +1 more Red Hat Enterprise Linux 7 perf, kernel, bpftool, kernel-rt, python-perf, kernel-kdump, +8 more Red Hat Enterprise Linux 8 perf, kernel, bpftool, kernel-rt, kernel-core, kernel-tools, +29 more Red Hat Enterprise Linux 10 kernel
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
9 mo ago

Exploit prediction

0.16% chance of exploitation in the next 30 days, higher than 5% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADP 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Linux Linux

Classification

Weakness
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.