CVE-2023-53259

linux: In the Linux kernel, the following vulnerability has been resolved: VMCI: check context->notify_page after call to g...

CVE-2023-53259 is fixed in 20 products on 1 platform, first by ALAS2023-2023-138, released March 20, 2023. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.1
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0015
4th percentile

In the Linux kernel, the following vulnerability has been resolved: VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF The call to get_user_pages_fast() in vmci_host_setup_notify() can return NULL context->notify_page causing a GPF. To avoid GPF check if context->notify_page == NULL and return error if so. general protection fault, probably for non-canonical address 0xe0009d1000000060: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: maybe wild-memory-access in range [0x0005088000000300- 0x0005088000000307] CPU: 2 PID: 26180 Comm: repro_34802241 Not tainted 6.1.0-rc4 #1 Hardware name: Red Hat KVM, BIOS 1.15.0-2.module+el8.6.0 04/01/2014 RIP: 0010:vmci_ctx_check_signal_notify+0x91/0xe0 Call Trace: <TASK> vmci_host_unlocked_ioctl+0x362/0x1f40 __x64_sys_ioctl+0x1a1/0x230 do_syscall_64+0x3a/0x90 entry_SYSCALL_64_after_hwframe+0x63/0xcd

Where it's fixed

ProductFixed inFixReleased
Linux
bpftool · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
bpftool-debuginfo · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-debuginfo · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-debuginfo-common-aarch64 · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-debuginfo-common-x86_64 · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-devel · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-headers · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-libbpf · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-libbpf-devel · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-libbpf-static · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-livepatch-6.1.19-30.43 · amzn 2023 1.0-0.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-tools · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-tools-debuginfo · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
kernel-tools-devel · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
linux · Debian 12.15 (bookworm) 6.1.20-1 DEBIAN-CVE-2023-53259 Sep 15, 2025
linux · Debian 13.5 (trixie) 6.1.20-1 DEBIAN-CVE-2023-53259 Sep 15, 2025
linux · Debian 14 6.1.20-1 DEBIAN-CVE-2023-53259 Sep 15, 2025
perf · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
perf-debuginfo · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
python3-perf · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023
python3-perf-debuginfo · amzn 2023 6.1.19-30.43.amzn2023 ALAS2023-2023-138 Mar 20, 2023

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.