CVE-2023-53695
Full vulnerability record from the local CVENow database.
Description
In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Deferred
Source identifier
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Published
2025-10-22 14:15:44
Last modified
2026-10-28 19:10:00.193000
View original CVE JSON
{
"id": "CVE-2023-53695",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"published": "2025-10-22T14:15:44.000",
"lastModified": "2026-10-28T19:10:00.193",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa."
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nudf: Detectar inodos del sistema vinculados a la jerarquía de directorios\n\nCuando el sistema de archivos UDF está corrupto, los inodos del sistema ocultos pueden vincularse a la jerarquía de directorios, lo cual es una vía para una mayor corrupción grave del sistema de archivos y confusión del kernel, como se observó en las imágenes difusas de syzbot. Negarse a acceder a los inodos del sistema vinculados a la jerarquía de directorios y viceversa."
}
],
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "unaffected",
"programFiles": [
"fs/udf/inode.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "1dc71eeb198a8daa17d0c995998a53b0b749a158",
"versionType": "git",
"status": "affected"
},
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "d747b31e2925a2f384e7dd1901a2e5bc5f984ed8",
"versionType": "git",
"status": "affected"
},
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "a44ec34b90440ada190924f5908b97026504fdcd",
"versionType": "git",
"status": "affected"
},
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "37e74003d81e79457535cbbdfa1603431c03fac0",
"versionType": "git",
"status": "affected"
},
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "1f328751b65c49c13a312d67a3bf27766b85baf7",
"versionType": "git",
"status": "affected"
},
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "9e3b5ef7d02eaa6553e79b4af9bd99227280f245",
"versionType": "git",
"status": "affected"
},
{
"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f",
"lessThan": "85a37983ec69cc9fcd188bc37c4de15ee326355a",
"versionType": "git",
"status": "affected"
},
{
"version": "801c7a20d255e300ab51a6fcb1d0e218d136b16f",
"versionType": "git",
"status": "affected"
},
{
"version": "3.17.2",
"lessThan": "3.18",
"versionType": "semver",
"status": "affected"
}
]
},
{
"vendor": "Linux",
"product": "Linux",
"defaultStatus": "affected",
"programFiles": [
"fs/udf/inode.c"
],
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"versions": [
{
"version": "3.18",
"status": "affected"
},
{
"version": "0",
"lessThan": "3.18",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "4.19.278",
"lessThanOrEqual": "4.19.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.4.235",
"lessThanOrEqual": "5.4.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.10.173",
"lessThanOrEqual": "5.10.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "5.15.99",
"lessThanOrEqual": "5.15.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.1.16",
"lessThanOrEqual": "6.1.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.2.3",
"lessThanOrEqual": "6.2.*",
"versionType": "semver",
"status": "unaffected"
},
{
"version": "6.3",
"lessThanOrEqual": "*",
"versionType": "original_commit_for_fix",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-15T21:36:32.364844Z",
"id": "CVE-2023-53695",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"references": [
{
"url": "https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
]
}