01 Record

CVE-2023-53623

mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

mm/swap: fix swap_info_struct race between swapoff and get_swap_pages()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.14% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 3.3% of scored records. A rank, not a probability.
NVD base score: 4.7 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-07 15:19Z1 YR AGO

Last updated

2026-05-11 19:48Z5 MO AGO

Reserved

2025-10-07

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')Class
CWE-413Improper Resource LockingBase

Data version

5.2

Document digest

940646f16247f4d49b10762f670f46cc085f117c46f6ba5df479da8a50509743

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxa2468cc9bfdff6139f59ca896671e5819ff5f94a to < 111a79d9b92f0a679fe300ccd3119ae9741f3d54, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < a55f268abdb74ac5633b75a09fefb58458e9d2a2, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < e7bba7ddb4318d5ea939c8db747c2c2780ab66f4, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < ea8c42b3b6d95ced3a4f555f04686d00ef0bb206, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < 4bdf1514b4268d29360ba9e43becdd49955bc7ae, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < 85cc118ce6f1a627901b6db50c9d01f2ad78cdbf, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < b9927d3a60ca9ed35625470888629c074e687ba0, a2468cc9bfdff6139f59ca896671e5819ff5f94a to < 6fe7d6b992113719e96744d974212df3fcddc76c, 4.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/111a79d9b92f0a679fe300ccd3119ae9741f3d54
git.kernel.orghttps://git.kernel.org/stable/c/a55f268abdb74ac5633b75a09fefb58458e9d2a2
git.kernel.orghttps://git.kernel.org/stable/c/e7bba7ddb4318d5ea939c8db747c2c2780ab66f4
git.kernel.orghttps://git.kernel.org/stable/c/ea8c42b3b6d95ced3a4f555f04686d00ef0bb206
git.kernel.orghttps://git.kernel.org/stable/c/4bdf1514b4268d29360ba9e43becdd49955bc7ae
git.kernel.orghttps://git.kernel.org/stable/c/85cc118ce6f1a627901b6db50c9d01f2ad78cdbf
git.kernel.orghttps://git.kernel.org/stable/c/b9927d3a60ca9ed35625470888629c074e687ba0
git.kernel.orghttps://git.kernel.org/stable/c/6fe7d6b992113719e96744d974212df3fcddc76c

07 Fixed in

Debian 12

linux
Fixed in 6.1.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.25-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.