CVE-2023-53695

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2023-53695", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2025-10-22T13:21:37.344Z", "datePublished": "2025-10-22T13:23:36.524Z", "dateUpdated": "2026-10-15T21:41:33.624Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T09:15:35.101Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - Exploitation requires a crafted UDF filesystem image to be mounted on the target and then accessed through ordinary local filesystem syscalls (lookup, open, unlink, write, truncate). There is no network-facing path into fs/udf.\nAC:L - The attacker fully controls the on-disk image and simply points a directory entry at the same block as a hidden system inode (VAT/metadata/mirror/bitmap FE), which deterministically returns the cached hidden inode from iget_locked() with the link-count-0 check bypassed. The follow-on races against the unlocked udf_try_read_meta()/inode_bmap() walk are also attacker-driven from two of the attacker's own threads.\nPR:L - udf is FS_REQUIRES_DEV without FS_USERNS_MOUNT, but the realistic delivery is a low-privileged local user's removable disc/USB/ISO auto-mounted by udisks2 on desktops, kiosks and shared workstations; every subsequent step (open, unlink, ftruncate, write on the exposed system inode) needs only ordinary unprivileged file access.\nUI:N - In the auto-mount scenario the attacker inserts the media and performs all filesystem operations themselves, so no separate victim action is required.\nS:U - The corruption and crash stay within the kernel's own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Exposing a system inode as a normal file lets the attacker mutate its extent list while udf_try_read_meta() walks it with no i_data_sem held, yielding out-of-bounds reads past the i_data kmalloc buffer and parsing of freed/reallocated blocks, so kernel heap contents can be surfaced through ordinary file reads.\nI:H - The same inode is simultaneously the kernel's internal block-translation table and a user-writable file, so writes and truncates rewrite in-use metadata mappings, and udf_free_inode()/udf_free_blocks() releases blocks the superblock is still using \u2014 unsynchronized modification of live kernel filesystem state that is exploitable for further memory corruption.\nA:H - syzbot reproduced a kernel WARNING in udf_free_inode() via udf_evict_inode() (udf_updated_lvid, which also carries a BUG_ON), which panics under panic_on_warn, and the resulting metadata-mapping corruption cascades into further oopses."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/udf/inode.c"], "versions": [{"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "1dc71eeb198a8daa17d0c995998a53b0b749a158", "status": "affected", "versionType": "git"}, {"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "d747b31e2925a2f384e7dd1901a2e5bc5f984ed8", "status": "affected", "versionType": "git"}, {"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "a44ec34b90440ada190924f5908b97026504fdcd", "status": "affected", "versionType": "git"}, {"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "37e74003d81e79457535cbbdfa1603431c03fac0", "status": "affected", "versionType": "git"}, {"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "1f328751b65c49c13a312d67a3bf27766b85baf7", "status": "affected", "versionType": "git"}, {"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "9e3b5ef7d02eaa6553e79b4af9bd99227280f245", "status": "affected", "versionType": "git"}, {"version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "85a37983ec69cc9fcd188bc37c4de15ee326355a", "status": "affected", "versionType": "git"}, {"version": "801c7a20d255e300ab51a6fcb1d0e218d136b16f", "status": "affected", "versionType": "git"}, {"version": "3.17.2", "lessThan": "3.18", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/udf/inode.c"], "versions": [{"version": "3.18", "status": "affected"}, {"version": "0", "lessThan": "3.18", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.278", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.235", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.173", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.99", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.16", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.2.3", "lessThanOrEqual": "6.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "4.19.278"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "5.4.235"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "5.10.173"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "5.15.99"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "6.1.16"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "6.2.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.18", "versionEndExcluding": "6.3"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.17.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158"}, {"url": "https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8"}, {"url": "https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd"}, {"url": "https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0"}, {"url": "https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7"}, {"url": "https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245"}, {"url": "https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a"}], "title": "udf: Detect system inodes linked into directory hierarchy", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53695", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:36:32.364844Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:41:33.624Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-53695", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-10-15T21:36:32.364844Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-15T21:36:33.155Z"}}], "cna": {"title": "udf: Detect system inodes linked into directory hierarchy", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - Exploitation requires a crafted UDF filesystem image to be mounted on the target and then accessed through ordinary local filesystem syscalls (lookup, open, unlink, write, truncate). There is no network-facing path into fs/udf.\nAC:L - The attacker fully controls the on-disk image and simply points a directory entry at the same block as a hidden system inode (VAT/metadata/mirror/bitmap FE), which deterministically returns the cached hidden inode from iget_locked() with the link-count-0 check bypassed. The follow-on races against the unlocked udf_try_read_meta()/inode_bmap() walk are also attacker-driven from two of the attacker's own threads.\nPR:L - udf is FS_REQUIRES_DEV without FS_USERNS_MOUNT, but the realistic delivery is a low-privileged local user's removable disc/USB/ISO auto-mounted by udisks2 on desktops, kiosks and shared workstations; every subsequent step (open, unlink, ftruncate, write on the exposed system inode) needs only ordinary unprivileged file access.\nUI:N - In the auto-mount scenario the attacker inserts the media and performs all filesystem operations themselves, so no separate victim action is required.\nS:U - The corruption and crash stay within the kernel's own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Exposing a system inode as a normal file lets the attacker mutate its extent list while udf_try_read_meta() walks it with no i_data_sem held, yielding out-of-bounds reads past the i_data kmalloc buffer and parsing of freed/reallocated blocks, so kernel heap contents can be surfaced through ordinary file reads.\nI:H - The same inode is simultaneously the kernel's internal block-translation table and a user-writable file, so writes and truncates rewrite in-use metadata mappings, and udf_free_inode()/udf_free_blocks() releases blocks the superblock is still using \u2014 unsynchronized modification of live kernel filesystem state that is exploitable for further memory corruption.\nA:H - syzbot reproduced a kernel WARNING in udf_free_inode() via udf_evict_inode() (udf_updated_lvid, which also carries a BUG_ON), which panics under panic_on_warn, and the resulting metadata-mapping corruption cascades into further oopses."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "1dc71eeb198a8daa17d0c995998a53b0b749a158", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "d747b31e2925a2f384e7dd1901a2e5bc5f984ed8", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "a44ec34b90440ada190924f5908b97026504fdcd", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "37e74003d81e79457535cbbdfa1603431c03fac0", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "1f328751b65c49c13a312d67a3bf27766b85baf7", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "9e3b5ef7d02eaa6553e79b4af9bd99227280f245", "versionType": "git"}, {"status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "lessThan": "85a37983ec69cc9fcd188bc37c4de15ee326355a", "versionType": "git"}, {"status": "affected", "version": "801c7a20d255e300ab51a6fcb1d0e218d136b16f", "versionType": "git"}, {"status": "affected", "version": "3.17.2", "lessThan": "3.18", "versionType": "semver"}], "programFiles": ["fs/udf/inode.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.18"}, {"status": "unaffected", "version": "0", "lessThan": "3.18", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.278", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.235", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.173", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.99", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.16", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.2.3", "versionType": "semver", "lessThanOrEqual": "6.2.*"}, {"status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/udf/inode.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158"}, {"url": "https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8"}, {"url": "https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd"}, {"url": "https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0"}, {"url": "https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7"}, {"url": "https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245"}, {"url": "https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.278", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.235", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.173", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.99", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.16", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.2.3", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.3", "versionStartIncluding": "3.18"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionStartIncluding": "3.17.2"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-05T09:15:35.101Z"}}}, "cveMetadata": {"cveId": "CVE-2023-53695", "state": "PUBLISHED", "dateUpdated": "2026-10-15T21:41:33.624Z", "dateReserved": "2025-10-22T13:21:37.344Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2025-10-22T13:23:36.524Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/udf/inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "1dc71eeb198a8daa17d0c995998a53b0b749a158", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"lessThan": "d747b31e2925a2f384e7dd1901a2e5bc5f984ed8", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"lessThan": "a44ec34b90440ada190924f5908b97026504fdcd", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"lessThan": "37e74003d81e79457535cbbdfa1603431c03fac0", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"lessThan": "1f328751b65c49c13a312d67a3bf27766b85baf7", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"lessThan": "9e3b5ef7d02eaa6553e79b4af9bd99227280f245", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"lessThan": "85a37983ec69cc9fcd188bc37c4de15ee326355a", "status": "affected", "version": "6174c2eb8ecef271159bdcde460ce8af54d8f72f", "versionType": "git"}, {"status": "affected", "version": "801c7a20d255e300ab51a6fcb1d0e218d136b16f", "versionType": "git"}, {"lessThan": "3.18", "status": "affected", "version": "3.17.2", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/udf/inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.18"}, {"lessThan": "3.18", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.278", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.235", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.173", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.99", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.16", "versionType": "semver"}, {"lessThanOrEqual": "6.2.*", "status": "unaffected", "version": "6.2.3", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa."}, {"lang": "es", "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nudf: Detectar inodos del sistema vinculados a la jerarqu\u00eda de directorios\n\nCuando el sistema de archivos UDF est\u00e1 corrupto, los inodos del sistema ocultos pueden vincularse a la jerarqu\u00eda de directorios, lo cual es una v\u00eda para una mayor corrupci\u00f3n grave del sistema de archivos y confusi\u00f3n del kernel, como se observ\u00f3 en las im\u00e1genes difusas de syzbot. Negarse a acceder a los inodos del sistema vinculados a la jerarqu\u00eda de directorios y viceversa."}], "id": "CVE-2023-53695", "lastModified": "2026-10-28T19:10:00.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-53695", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-10-15T21:36:32.364844Z", "version": "2.0.3"}}]}, "published": "2025-10-22T14:15:44.000", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Deferred"}

{"bugzilla": {"description": "kernel: udf: Detect system inodes linked into directory hierarchy", "id": "2405761", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2405761"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.0", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "status": "draft"}, "details": ["No description is available for this CVE."], "name": "CVE-2023-53695", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2025-10-22T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-53695\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-53695\nhttps://lore.kernel.org/linux-cve-announce/2025102210-CVE-2023-53695-f553@gregkh/T"], "threat_severity": "Moderate"}

{"created": "2025-10-23T10:07:43.835028+00:00", "updated": "2025-10-23T10:07:43.835054+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}