CVE-2023-53683

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/37cab61a52d6f42b2d961c51bcf369f09e235fb5	Patch
https://git.kernel.org/stable/c/3a9d68d84b2e41ba3f2a727b36f035fad6800492	Patch
https://git.kernel.org/stable/c/48960a503fcec76d3f72347b7e679dda08ca43be	Patch
https://git.kernel.org/stable/c/61af77acd039ffd221bf7adf0dc95d0a4d377505	Patch
https://git.kernel.org/stable/c/81b21c0f0138ff5a499eafc3eb0578ad2a99622c	Patch
https://git.kernel.org/stable/c/a75d9211a07fed513c08c5d4861c4a36ac6a74fe	Patch
https://git.kernel.org/stable/c/c074913b12db3632b11588b31bbfb0fa80a0a1c9	Patch
https://git.kernel.org/stable/c/c8daee66585897a4c90d937c91e762100237bff9	Patch

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::
	cpe:2.3:o:linux:linux_kernel::::::::

History

28 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: fs: hfsplus: eliminar WARN_ON() de hfsplus_cat_{read,write}_inode() syzbot está activando WARN_ON() en hfsplus_cat_{read,write}_inode(), porque una imagen de sistema de archivos manipulada puede contener una longitud falsa. Estas condiciones no son errores del kernel que puedan justificar que el kernel entre en pánico.

Information

Published : 2025-10-07 16:15

Updated : 2026-10-28 20:10

NVD link : CVE-2023-53683

Mitre link : CVE-2023-53683

CVE.ORG link : CVE-2023-53683

JSON object : View

Products Affected

linux

linux_kernel

CWE

CWE-617

Reachable Assertion

{"id": "CVE-2023-53683", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "f62f5ee63052324ad94dd05091743d9e09f72070", "lessThan": "61af77acd039ffd221bf7adf0dc95d0a4d377505", "versionType": "git"}, {"status": "affected", "version": "ab778439c6fa0071698b62a351f79d319fd72c53", "lessThan": "c074913b12db3632b11588b31bbfb0fa80a0a1c9", "versionType": "git"}, {"status": "affected", "version": "781fa141414ef18b52f15037497155f80bf0ecab", "lessThan": "a75d9211a07fed513c08c5d4861c4a36ac6a74fe", "versionType": "git"}, {"status": "affected", "version": "1f881d9201f6e0a917004a14329f9ff3d0bfa1e5", "lessThan": "c8daee66585897a4c90d937c91e762100237bff9", "versionType": "git"}, {"status": "affected", "version": "48d9e2e6de01ed35e965eb549758a837c07b601d", "lessThan": "37cab61a52d6f42b2d961c51bcf369f09e235fb5", "versionType": "git"}, {"status": "affected", "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb", "lessThan": "48960a503fcec76d3f72347b7e679dda08ca43be", "versionType": "git"}, {"status": "affected", "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb", "lessThan": "3a9d68d84b2e41ba3f2a727b36f035fad6800492", "versionType": "git"}, {"status": "affected", "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb", "lessThan": "81b21c0f0138ff5a499eafc3eb0578ad2a99622c", "versionType": "git"}, {"status": "affected", "version": "4.14.303", "lessThan": "4.14.316", "versionType": "semver"}, {"status": "affected", "version": "4.19.270", "lessThan": "4.19.284", "versionType": "semver"}, {"status": "affected", "version": "5.4.229", "lessThan": "5.4.244", "versionType": "semver"}, {"status": "affected", "version": "5.10.163", "lessThan": "5.10.181", "versionType": "semver"}, {"status": "affected", "version": "5.15.87", "lessThan": "5.15.113", "versionType": "semver"}], "programFiles": ["fs/hfsplus/inode.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.16"}, {"status": "unaffected", "version": "0", "lessThan": "5.16", "versionType": "semver"}, {"status": "unaffected", "version": "4.14.316", "versionType": "semver", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.284", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.244", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.181", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.113", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.30", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.3.4", "versionType": "semver", "lessThanOrEqual": "6.3.*"}, {"status": "unaffected", "version": "6.4", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/hfsplus/inode.c"], "defaultStatus": "affected"}]}], "published": "2025-10-07T16:15:52.530", "references": [{"url": "https://git.kernel.org/stable/c/37cab61a52d6f42b2d961c51bcf369f09e235fb5", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3a9d68d84b2e41ba3f2a727b36f035fad6800492", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/48960a503fcec76d3f72347b7e679dda08ca43be", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/61af77acd039ffd221bf7adf0dc95d0a4d377505", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/81b21c0f0138ff5a499eafc3eb0578ad2a99622c", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a75d9211a07fed513c08c5d4861c4a36ac6a74fe", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c074913b12db3632b11588b31bbfb0fa80a0a1c9", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c8daee66585897a4c90d937c91e762100237bff9", "tags": ["Patch"], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-617"}]}], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n\nsyzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for\ncrafted filesystem image can contain bogus length. There conditions are\nnot kernel bugs that can justify kernel to panic."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfs: hfsplus: eliminar WARN_ON() de hfsplus_cat_{read,write}_inode()\n\nsyzbot est\u00e1 activando WARN_ON() en hfsplus_cat_{read,write}_inode(), porque una imagen de sistema de archivos manipulada puede contener una longitud falsa. Estas condiciones no son errores del kernel que puedan justificar que el kernel entre en p\u00e1nico."}], "lastModified": "2026-10-28T20:10:00.163", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF7207EA-C162-450C-AA30-DE558BD497E2", "versionEndExcluding": "4.14.316", "versionStartIncluding": "4.14.303"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB7C806A-AE4E-471E-9614-A01625D268BE", "versionEndExcluding": "4.19.284", "versionStartIncluding": "4.19.270"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76B9EF77-FF34-4AE4-A53B-EF1690C155BB", "versionEndExcluding": "5.4.244", "versionStartIncluding": "5.4.229"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94570266-A638-4ABF-8867-9E4E9E02E3FC", "versionEndExcluding": "5.10.181", "versionStartIncluding": "5.10.163"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FA7B71C8-9572-46A3-BB60-4A67171DD3E1", "versionEndExcluding": "5.15.113", "versionStartIncluding": "5.15.87"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107", "versionEndExcluding": "6.1.30", "versionStartIncluding": "5.16"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B", "versionEndExcluding": "6.3.4", "versionStartIncluding": "6.2"}], "operator": "OR"}]}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}