CVE-2023-53695

In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158
https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7
https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0
https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a
https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245
https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd
https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8

Configurations

No configuration.

History

No history.

Information

Published : 2025-10-22 14:15

Updated : 2026-08-04 10:19

NVD link : CVE-2023-53695

Mitre link : CVE-2023-53695

CVE.ORG link : CVE-2023-53695

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-53695", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "1dc71eeb198a8daa17d0c995998a53b0b749a158", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "d747b31e2925a2f384e7dd1901a2e5bc5f984ed8", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "a44ec34b90440ada190924f5908b97026504fdcd", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "37e74003d81e79457535cbbdfa1603431c03fac0", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "1f328751b65c49c13a312d67a3bf27766b85baf7", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "9e3b5ef7d02eaa6553e79b4af9bd99227280f245", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "85a37983ec69cc9fcd188bc37c4de15ee326355a", "versionType": "git"}, {"status": "affected", "version": "801c7a20d255e300ab51a6fcb1d0e218d136b16f", "versionType": "git"}, {"status": "affected", "version": "3.17.2", "lessThan": "3.18", "versionType": "semver"}], "programFiles": ["fs/udf/inode.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.18"}, {"status": "unaffected", "version": "0", "lessThan": "3.18", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.278", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.235", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.173", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.99", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.16", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.3", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/udf/inode.c"], "defaultStatus": "affected"}]}], "published": "2025-10-22T14:15:44.000", "references": [{"url": "https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa."}], "lastModified": "2026-08-04T10:19:18.287", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}