Analysis Summary

CVE-2023-53137 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by corruption when moving a directory in ext4.

CVE-2023-53136 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by struct pid leaks in OOB support.

CVE-2023-53135 CVSS:5.5

Linux Kernel is vulnerable to a denial of service, caused by using READ_ONCE_NOCHECK in imprecise unwinding stack mode in riscv.

Impact

• Denial of Service

Indicators of Compromise

CVE

• CVE-2023-53137

• CVE-2023-53136

• CVE-2023-53135

Affected Vendors

Remediation

Upgrade to the latest version of Kernel, available from the Linux Kernel GIT Repository.

CVE-2023-53137

CVE-2023-53136

CVE-2023-53135