CVE-2023-53683
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.
Severity
MEDIUM
CVSS score
5.5
(v3.1)
Vulnerability status
Modified
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-10-07 16:15:52.530000
Last modified
2026-10-28 20:10:00.163000
View original CVE JSON
{
"id": "CVE-2023-53683",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-10-07T16:15:52.530",
"lastModified": "2026-10-28T20:10:00.163",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n\nsyzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for\ncrafted filesystem image can contain bogus length. There conditions are\nnot kernel bugs that can justify kernel to panic."
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfs: hfsplus: eliminar WARN_ON() de hfsplus_cat_{read,write}_inode()\n\nsyzbot está activando WARN_ON() en hfsplus_cat_{read,write}_inode(), porque una imagen de sistema de archivos manipulada puede contener una longitud falsa. Estas condiciones no son errores del kernel que puedan justificar que el kernel entre en pánico."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"fs/hfsplus/inode.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "f62f5ee63052324ad94dd05091743d9e09f72070",
"lessThan": "61af77acd039ffd221bf7adf0dc95d0a4d377505",
"versionType": "git",
"status": "affected"
},
{
"version": "ab778439c6fa0071698b62a351f79d319fd72c53",
"lessThan": "c074913b12db3632b11588b31bbfb0fa80a0a1c9",
"versionType": "git",
"status": "affected"
},
{
"version": "781fa141414ef18b52f15037497155f80bf0ecab",
"lessThan": "a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
"versionType": "git",
"status": "affected"
},
{
"version": "1f881d9201f6e0a917004a14329f9ff3d0bfa1e5",
"lessThan": "c8daee66585897a4c90d937c91e762100237bff9",
"versionType": "git",
"status": "affected"
},
{
"version": "48d9e2e6de01ed35e965eb549758a837c07b601d",
"lessThan": "37cab61a52d6f42b2d961c51bcf369f09e235fb5",
"versionType": "git",
"status": "affected"
},
{
"version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
"lessThan": "48960a503fcec76d3f72347b7e679dda08ca43be",
"versionType": "git",
"status": "affected"
},
{
"version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
"lessThan": "3a9d68d84b2e41ba3f2a727b36f035fad6800492",
"versionType": "git",
"status": "affected"
},
{
"version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
"lessThan": "81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
"versionType": "git",
"status": "affected"
},
{
"version": "4.14.303",
"lessThan": "4.14.316",
"versionType": "semver",
"status": "affected"
},
{
"version": "4.19.270",
"lessThan": "4.19.284",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.4.229",
"lessThan": "5.4.244",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.10.163",
"lessThan": "5.10.181",
"versionType": "semver",
"status": "affected"
},
{
"version": "5.15.87",
"lessThan": "5.15.113",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"fs/hfsplus/inode.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "5.16",
"status": "affected"
},
{
"version": "0",
"lessThan": "5.16",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "4.14.316",
"lessThanOrEqual": "4.14.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "4.19.284",
"lessThanOrEqual": "4.19.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.4.244",
"lessThanOrEqual": "5.4.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.181",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.113",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.30",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.3.4",
"lessThanOrEqual": "6.3.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.4",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-617"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.14.303",
"versionEndExcluding": "4.14.316",
"matchCriteriaId": "AF7207EA-C162-450C-AA30-DE558BD497E2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "4.19.270",
"versionEndExcluding": "4.19.284",
"matchCriteriaId": "CB7C806A-AE4E-471E-9614-A01625D268BE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.4.229",
"versionEndExcluding": "5.4.244",
"matchCriteriaId": "76B9EF77-FF34-4AE4-A53B-EF1690C155BB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.10.163",
"versionEndExcluding": "5.10.181",
"matchCriteriaId": "94570266-A638-4ABF-8867-9E4E9E02E3FC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.15.87",
"versionEndExcluding": "5.15.113",
"matchCriteriaId": "FA7B71C8-9572-46A3-BB60-4A67171DD3E1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "5.16",
"versionEndExcluding": "6.1.30",
"matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"versionStartIncluding": "6.2",
"versionEndExcluding": "6.3.4",
"matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B"
}
]
}
]
}
],
"references": [
{
"url": "https://git.kernel.org/stable/c/37cab61a52d6f42b2d961c51bcf369f09e235fb5",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/3a9d68d84b2e41ba3f2a727b36f035fad6800492",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/48960a503fcec76d3f72347b7e679dda08ca43be",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/61af77acd039ffd221bf7adf0dc95d0a4d377505",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c074913b12db3632b11588b31bbfb0fa80a0a1c9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
},
{
"url": "https://git.kernel.org/stable/c/c8daee66585897a4c90d937c91e762100237bff9",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"tags": [
"Patch"
]
}
]
}