CVE-2023-53075 – This is a use-after-free vulnerability in the L... (How to Fix)

Q: What is the severity of CVE-2023-53075?

CVE-2023-53075 has a CVSS score of 7.8 (HIGH). This is a use-after-free vulnerability in the Linux kernel's ftrace subsystem that allows local attackers to potentially execute arbitrary code or cause denial of service. It affects Linux systems with ftrace enabled, requiring local access to exploit.

📋 TL;DR

This is a use-after-free vulnerability in the Linux kernel's ftrace subsystem that allows local attackers to potentially execute arbitrary code or cause denial of service. It affects Linux systems with ftrace enabled, requiring local access to exploit.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific affected versions not specified in CVE, but patches available for multiple stable branches

Operating Systems: Linux distributions using vulnerable kernel versions

Default Config Vulnerable: ⚠️ Yes

Notes: Requires ftrace to be enabled and accessible. Many distributions enable ftrace by default for debugging.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Local privilege escalation to kernel-level code execution, potentially leading to full system compromise.

🟠

Likely Case

Kernel panic or system crash causing denial of service.

🟢

If Mitigated

Limited impact if ftrace is disabled or proper access controls restrict local users.

🌐 Internet-Facing: LOW - Requires local access, not directly exploitable over network.

🏢 Internal Only: MEDIUM - Local users or compromised accounts could exploit this vulnerability.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires local access and ability to load kernel modules or use ftrace functionality.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Patched in kernel commits: 2a0d71fabfeb, 2de28e5ce34b, 4f84f31f6341, 7569ee04b0e3, 83c3b2f4e7c6

Vendor Advisory: https://git.kernel.org/stable/c/2a0d71fabfeb349216d33f001a6421b1768bd3a9

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution's repositories. 2. Reboot system to load new kernel. 3. Verify kernel version after reboot.

🔧 Temporary Workarounds

Disable ftrace

linux

Disable the ftrace subsystem to prevent exploitation

echo 0 > /sys/kernel/debug/tracing/tracing_on
echo nop > /sys/kernel/debug/tracing/current_tracer

Restrict ftrace access

linux

Limit access to ftrace debugfs interface to privileged users only

chmod 700 /sys/kernel/debug/tracing
chown root:root /sys/kernel/debug/tracing

🧯 If You Can't Patch

Implement strict access controls to prevent local users from loading kernel modules or accessing ftrace functionality.
Monitor for suspicious kernel module loading or ftrace usage patterns.

🔍 How to Verify

Check if Vulnerable:

Check kernel version and compare with patched versions from distribution vendor. Check if ftrace is enabled: cat /sys/kernel/debug/tracing/tracing_on

Check Version:

uname -r

Verify Fix Applied:

Verify kernel version matches patched version from vendor. Test ftrace functionality to ensure system stability.

📡 Detection & Monitoring

Log Indicators:

Kernel panic logs
KASAN reports of use-after-free in ftrace
Failed kernel module loading attempts

Network Indicators:

Not applicable - local vulnerability

SIEM Query:

Search for: 'kernel panic', 'KASAN', 'use-after-free', 'ftrace' in system logs

📊 Metadata

CVE ID: CVE-2023-53075

CVSS v3 Score: 7.8 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE: CWE-416

EPSS Score: 0.03% exploit probability (9th percentile)

Published: May 2, 2025

Last Updated: November 12, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2023-53075, you might also want to check these: