CVE-2023-53341— of/fdt: run soc memory setup when early_init_dt_scan_memory fails
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 1f012283e9360fb4007308f04cfaeb205e34b684< 04836fc5b720dfa32ff781383d84f63019abf9b9 | affected |
1f012283e9360fb4007308f04cfaeb205e34b684< c4849f18185fd4e93b04cd45552f8d68c0240e21 | affected | ||
1f012283e9360fb4007308f04cfaeb205e34b684< 2a12187d5853d9fd5102278cecef7dac7c8ce7ea | affected | ||
5.17 | affected | ||
< 5.17 | unaffected | ||
6.0.19≤ 6.0.* | unaffected | ||
6.1.5≤ 6.1.* | unaffected | ||
6.2≤ * | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-53341
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
of/fdt: run soc memory setup when early_init_dt_scan_memory fails
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: of/fdt: run soc memory setup when early_init_dt_scan_memory fails If memory has been found early_init_dt_scan_memory now returns 1. If it hasn't found any memory it will return 0, allowing other memory setup mechanisms to carry on. Previously early_init_dt_scan_memory always returned 0 without distinguishing between any kind of memory setup being done or not. Any code path after the early_init_dt_scan memory call in the ramips plat_mem_setup code wouldn't be executed anymore. Making early_init_dt_scan_memory the only way to initialize the memory. Some boards, including my mt7621 based Cudy X6 board, depend on memory initialization being done via the soc_info.mem_detect function pointer. Those wouldn't be able to obtain memory and panic the kernel during early bootup with the message "early_init_dt_alloc_memory_arch: Failed to allocate 12416 bytes align=0x40".
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于early_init_dt_scan_memory返回值处理不当，可能导致内存初始化失败。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-53341
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-53341
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-09-17 · 56 CVEs total
| CVE-2023-53338 | 9.8 CRITICAL | lwt: Fix return values of BPF xmit ops |
| CVE-2022-50373 | 9.8 CRITICAL | fs: dlm: fix race in lowcomms |
| CVE-2022-50363 | 9.8 CRITICAL | skmsg: pass gfp argument to alloc_sk_msg() |
| CVE-2023-53360 | 9.8 CRITICAL | NFSv4.2: Rework scratch handling for READ_PLUS (again) |
| CVE-2023-53358 | 8.8 HIGH | ksmbd: fix racy issue under cocurrent smb2 tree disconnect |
| CVE-2023-53340 | 7.8 HIGH | net/mlx5: Collect command failures data only for known commands |
| CVE-2022-50368 | 7.8 HIGH | drm/msm/dsi: fix memory corruption with too many bridges |
| CVE-2022-50367 | 7.8 HIGH | fs: fix UAF/GPF bug in nilfs_mdt_destroy |
| CVE-2022-50362 | 7.8 HIGH | dmaengine: hisilicon: Add multi-thread support for a DMA channel |
| CVE-2023-53354 | 7.8 HIGH | skbuff: skb_segment, Call zero copy functions before using skbuff frags |
| CVE-2022-50354 | 7.8 HIGH | drm/amdkfd: Fix kfd_process_device_init_vm error handling |
| CVE-2022-50355 | 7.8 HIGH | staging: vt6655: fix some erroneous memory clean-up loops |
| CVE-2023-53335 | 7.5 HIGH | RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() |
| CVE-2022-50365 | 7.5 HIGH | skbuff: Account for tail adjustment during pull operations |
| CVE-2023-53336 | media: ipu-bridge: Fix null pointer deref on SSDB/PLD parsing warnings | |
| CVE-2022-50369 | drm/vkms: Fix null-ptr-deref in vkms_release() | |
| CVE-2022-50372 | cifs: Fix memory leak when build ntlmssp negotiate blob failed | |
| CVE-2022-50371 | led: qcom-lpg: Fix sleeping in atomic | |
| CVE-2022-50370 | i2c: designware: Fix handling of real but unexpected device interrupts | |
| CVE-2022-50374 | Bluetooth: hci_{ldisc,serdev}: check percpu_init_rwsem() failure |
Showing top 20 of 56 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-68454
KVM: s390: pci: Fix handling of AIF enable without AISB - CVE-2026-68453
s390/zcrypt: Fix buffer over-read in cca_cipher2protkey - CVE-2026-68452
s390/zcrypt: Validate length for CCA AES cipher key requests - CVE-2026-68451
s390/zcrypt: Validate length for CCA ECC private key request - CVE-2026-68450
btrfs: free mapping node on duplicate reloc root insert
Same vendor: Linux
- CVE-2026-68454
KVM: s390: pci: Fix handling of AIF enable without AISB - CVE-2026-68453
s390/zcrypt: Fix buffer over-read in cca_cipher2protkey - CVE-2026-68452
s390/zcrypt: Validate length for CCA AES cipher key requests - CVE-2026-68451
s390/zcrypt: Validate length for CCA ECC private key request - CVE-2026-68450
btrfs: free mapping node on duplicate reloc root insert
V. Comments for CVE-2023-53341
No comments yet