CVE-2023-53473

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-53473", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-10-01T11:39:39.401Z", "datePublished": "2025-10-01T11:42:42.875Z", "dateUpdated": "2026-10-15T21:41:28.341Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T09:14:14.651Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: improve error handling from ext4_dirhash()\n\nThe ext4_dirhash() will *almost* never fail, especially when the hash\ntree feature was first introduced. However, with the addition of\nsupport of encrypted, casefolded file names, that function can most\ncertainly fail today.\n\nSo make sure the callers of ext4_dirhash() properly check for\nfailures, and reflect the errors back up to their callers."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerability is triggered entirely through local syscalls (`getdents64()`/`lseek()` on a directory of a mounted ext4 filesystem, or `creat()`/`rename()` driving `do_split`). No network protocol handler is involved.\nAC:L - The syzbot reproducer is fully deterministic \u2014 a superblock with `s_def_hash_version = DX_HASH_SIPHASH` plus a single `getdents64()` makes `ext4fs_dirhash()` fail on every directory entry, with no race or memory-layout condition outside the attacker's control.\nPR:L - An ordinary unprivileged local user performs the whole attack \u2014 reading the directory and recovering the leaked stack bytes via `telldir()`; the mounted crafted image is obtained through removable-media automount (udisks2 on desktops/kiosks), and the `-ENOMEM` variant needs no crafted image at all on a normal casefolded volume.\nUI:N - No second party needs to act \u2014 the same attacker supplies the medium and issues the syscalls, and on a legitimately mounted casefolded filesystem the allocation-failure path triggers with no user action whatsoever.\nS:U - The uninitialized read, the disclosure, and the metadata corruption all stay within the kernel's own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Uninitialized kernel stack memory is handed straight to userspace as the readdir file position (`hash2pos()` \u2192 `f_pos` \u2192 `telldir`), repeatably and from a fixed stack slot the attacker can pre-seed with earlier syscalls, yielding a general kernel-stack read primitive that leaks pointers and defeats KASLR.\nI:H - Garbage/zero hash values are propagated into on-disk metadata \u2014 `ext4_insert_dentry` stores them in dirents, `make_indexed_dir`/`dx_insert_block` write them into htree nodes, and `dx_make_map`+`do_split` relocate directory entries based on stale hashes \u2014 corrupting the directory index of a mounted filesystem.\nA:H - The resulting index inconsistency drives `EXT4_ERROR_INODE`/`ext4_error`, forcing a remount-read-only on the default `errors=remount-ro` and a full kernel panic under `errors=panic`, while the garbage rbtree hashes can make `ext4_dx_readdir` return inconsistent results or fail to converge."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ext4/hash.c", "fs/ext4/namei.c"], "versions": [{"version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "b2531936118deb3f479c4fa1bcd787b74b8faa6a", "status": "affected", "versionType": "git"}, {"version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "f68876aeef96ef8b708ab10b9cb47ce0a5adb424", "status": "affected", "versionType": "git"}, {"version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "70d579aefa652a06af97e013e3fbbabbe5a43553", "status": "affected", "versionType": "git"}, {"version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "c1fae027da61fe8e7eb99f7244297e81bc0f1e43", "status": "affected", "versionType": "git"}, {"version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ext4/hash.c", "fs/ext4/namei.c"], "versions": [{"version": "5.2", "status": "affected"}, {"version": "0", "lessThan": "5.2", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.112", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.29", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.2.16", "lessThanOrEqual": "6.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.3.3", "lessThanOrEqual": "6.3.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.4", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.2", "versionEndExcluding": "5.15.112"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.2", "versionEndExcluding": "6.1.29"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.2", "versionEndExcluding": "6.2.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.2", "versionEndExcluding": "6.3.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.2", "versionEndExcluding": "6.4"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/b2531936118deb3f479c4fa1bcd787b74b8faa6a"}, {"url": "https://git.kernel.org/stable/c/f68876aeef96ef8b708ab10b9cb47ce0a5adb424"}, {"url": "https://git.kernel.org/stable/c/70d579aefa652a06af97e013e3fbbabbe5a43553"}, {"url": "https://git.kernel.org/stable/c/c1fae027da61fe8e7eb99f7244297e81bc0f1e43"}, {"url": "https://git.kernel.org/stable/c/4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786"}], "title": "ext4: improve error handling from ext4_dirhash()", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53473", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:34:36.698376Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:41:28.341Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53473", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:34:36.698376Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:34:37.623Z"}}], "cna": {"title": "ext4: improve error handling from ext4_dirhash()", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerability is triggered entirely through local syscalls (`getdents64()`/`lseek()` on a directory of a mounted ext4 filesystem, or `creat()`/`rename()` driving `do_split`). No network protocol handler is involved.\nAC:L - The syzbot reproducer is fully deterministic \u2014 a superblock with `s_def_hash_version = DX_HASH_SIPHASH` plus a single `getdents64()` makes `ext4fs_dirhash()` fail on every directory entry, with no race or memory-layout condition outside the attacker's control.\nPR:L - An ordinary unprivileged local user performs the whole attack \u2014 reading the directory and recovering the leaked stack bytes via `telldir()`; the mounted crafted image is obtained through removable-media automount (udisks2 on desktops/kiosks), and the `-ENOMEM` variant needs no crafted image at all on a normal casefolded volume.\nUI:N - No second party needs to act \u2014 the same attacker supplies the medium and issues the syscalls, and on a legitimately mounted casefolded filesystem the allocation-failure path triggers with no user action whatsoever.\nS:U - The uninitialized read, the disclosure, and the metadata corruption all stay within the kernel's own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Uninitialized kernel stack memory is handed straight to userspace as the readdir file position (`hash2pos()` \u2192 `f_pos` \u2192 `telldir`), repeatably and from a fixed stack slot the attacker can pre-seed with earlier syscalls, yielding a general kernel-stack read primitive that leaks pointers and defeats KASLR.\nI:H - Garbage/zero hash values are propagated into on-disk metadata \u2014 `ext4_insert_dentry` stores them in dirents, `make_indexed_dir`/`dx_insert_block` write them into htree nodes, and `dx_make_map`+`do_split` relocate directory entries based on stale hashes \u2014 corrupting the directory index of a mounted filesystem.\nA:H - The resulting index inconsistency drives `EXT4_ERROR_INODE`/`ext4_error`, forcing a remount-read-only on the default `errors=remount-ro` and a full kernel panic under `errors=panic`, while the garbage rbtree hashes can make `ext4_dx_readdir` return inconsistent results or fail to converge."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "b2531936118deb3f479c4fa1bcd787b74b8faa6a", "versionType": "git"}, {"status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "f68876aeef96ef8b708ab10b9cb47ce0a5adb424", "versionType": "git"}, {"status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "70d579aefa652a06af97e013e3fbbabbe5a43553", "versionType": "git"}, {"status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "c1fae027da61fe8e7eb99f7244297e81bc0f1e43", "versionType": "git"}, {"status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "lessThan": "4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786", "versionType": "git"}], "programFiles": ["fs/ext4/hash.c", "fs/ext4/namei.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.2"}, {"status": "unaffected", "version": "0", "lessThan": "5.2", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.112", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.29", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.16", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3.3", "versionType": "semver", "lessThanOrEqual": "6.3.*"}, {"status": "unaffected", "version": "6.4", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ext4/hash.c", "fs/ext4/namei.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/b2531936118deb3f479c4fa1bcd787b74b8faa6a"}, {"url": "https://git.kernel.org/stable/c/f68876aeef96ef8b708ab10b9cb47ce0a5adb424"}, {"url": "https://git.kernel.org/stable/c/70d579aefa652a06af97e013e3fbbabbe5a43553"}, {"url": "https://git.kernel.org/stable/c/c1fae027da61fe8e7eb99f7244297e81bc0f1e43"}, {"url": "https://git.kernel.org/stable/c/4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: improve error handling from ext4_dirhash()\n\nThe ext4_dirhash() will *almost* never fail, especially when the hash\ntree feature was first introduced. However, with the addition of\nsupport of encrypted, casefolded file names, that function can most\ncertainly fail today.\n\nSo make sure the callers of ext4_dirhash() properly check for\nfailures, and reflect the errors back up to their callers."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.112", "versionStartIncluding": "5.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.29", "versionStartIncluding": "5.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.2.16", "versionStartIncluding": "5.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.3.3", "versionStartIncluding": "5.2"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.4", "versionStartIncluding": "5.2"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T09:14:14.651Z"}}}, "cveMetadata": {"cveId": "CVE-2023-53473", "state": "PUBLISHED", "dateUpdated": "2026-10-15T21:41:28.341Z", "dateReserved": "2025-10-01T11:39:39.401Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2025-10-01T11:42:42.875Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ext4/hash.c", "fs/ext4/namei.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "b2531936118deb3f479c4fa1bcd787b74b8faa6a", "status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "versionType": "git"}, {"lessThan": "f68876aeef96ef8b708ab10b9cb47ce0a5adb424", "status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "versionType": "git"}, {"lessThan": "70d579aefa652a06af97e013e3fbbabbe5a43553", "status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "versionType": "git"}, {"lessThan": "c1fae027da61fe8e7eb99f7244297e81bc0f1e43", "status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "versionType": "git"}, {"lessThan": "4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786", "status": "affected", "version": "b886ee3e778ec2ad43e276fd378ab492cf6819b7", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ext4/hash.c", "fs/ext4/namei.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.2"}, {"lessThan": "5.2", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.112", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.29", "versionType": "semver"}, {"lessThanOrEqual": "6.2.*", "status": "unaffected", "version": "6.2.16", "versionType": "semver"}, {"lessThanOrEqual": "6.3.*", "status": "unaffected", "version": "6.3.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.4", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "C7EBD19F-AB70-44FF-B147-C984EAC49F2D", "versionEndExcluding": "5.15.112", "versionStartIncluding": "5.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "D48F00B5-5471-4D1B-BE47-1DAB8122F35A", "versionEndExcluding": "6.1.29", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F92F7C8E-A977-4255-B1B6-D1908D8B408F", "versionEndExcluding": "6.2.16", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D96A7FC-D812-4458-AEA8-3FF4023E6B75", "versionEndExcluding": "6.3.3", "versionStartIncluding": "6.3", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*", "matchCriteriaId": "38BC6744-7D25-4C02-9966-B224CD071D30", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: improve error handling from ext4_dirhash()\n\nThe ext4_dirhash() will *almost* never fail, especially when the hash\ntree feature was first introduced. However, with the addition of\nsupport of encrypted, casefolded file names, that function can most\ncertainly fail today.\n\nSo make sure the callers of ext4_dirhash() properly check for\nfailures, and reflect the errors back up to their callers."}], "id": "CVE-2023-53473", "lastModified": "2026-10-15T22:17:39.960", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-53473", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-15T21:34:36.698376Z", "version": "2.0.3"}}]}, "published": "2025-10-01T12:15:49.557", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/70d579aefa652a06af97e013e3fbbabbe5a43553"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/b2531936118deb3f479c4fa1bcd787b74b8faa6a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/c1fae027da61fe8e7eb99f7244297e81bc0f1e43"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f68876aeef96ef8b708ab10b9cb47ce0a5adb424"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ext4: improve error handling from ext4_dirhash()", "id": "2400719", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2400719"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2023-53473", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Fix deferred", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:rhivos:1", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat In-Vehicle Operating System 1"}], "public_date": "2025-10-01T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-53473\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-53473\nhttps://lore.kernel.org/linux-cve-announce/2025100110-CVE-2023-53473-bf5d@gregkh/T"], "threat_severity": "Low"}

{"created": "2025-10-02T08:39:57.838861+00:00", "updated": "2025-10-02T08:39:57.838916+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}