Vulnerability details
CVE-2023-53695
Linux Linux
udf: Detect system inodes linked into directory hierarchy
CVSS 3.1
7.8High
Official description
In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.8High | 3.1 | CVEProject cvelistV5 (CNA) (Linux) | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Linux | Linux | 3.18 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 801c7a20d255e300ab51a6fcb1d0e218d136b16f | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 3.17.2 ≤ v < 3.18 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < 37e74003d81e79457535cbbdfa1603431c03fac0 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < 1f328751b65c49c13a312d67a3bf27766b85baf7 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < 1dc71eeb198a8daa17d0c995998a53b0b749a158 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < 85a37983ec69cc9fcd188bc37c4de15ee326355a | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < 9e3b5ef7d02eaa6553e79b4af9bd99227280f245 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < d747b31e2925a2f384e7dd1901a2e5bc5f984ed8 | CVEProject cvelistV5 (CNA) |
| Linux | Linux | 6174c2eb8ecef271159bdcde460ce8af54d8f72f ≤ v < a44ec34b90440ada190924f5908b97026504fdcd | CVEProject cvelistV5 (CNA) |
References and advisories
7- https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158
- https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8
- https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd
- https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0
- https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7
- https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245
- https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-10-22
- Last updated
- 2026-10-16
- State
- Published
- Assigner (CNA)
- Linux
Exploit prediction (EPSS)
0.16%
Probability of exploitation in 30 days
5.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- —