CVE-2023-53695
Published: October 23, 2025Last modified: October 23, 2025
Description
In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.
Severity score breakdown
| Parameter | Value |
|---|---|
| Base score | 7.8 |
| Attack Vector | LOCAL |
| Attack complexity | LOW |
| Privileges required | LOW |
| User interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality | HIGH |
| Integrity impact | HIGH |
| Availability impact | HIGH |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Status
| Product | Release | Package | Status |
|---|---|---|---|
| Alpaquita Linux | 23 LTS | linux-lts | Not affected (6.1.33-r0) |
| 25 LTS | linux-lts | Not affected (6.6.89-r0) | |
| Stream | linux-lts | Fixed (6.6.58-r0) |
References
- https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158
- https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7
- https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0
- https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a
- https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245
- https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd
- https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8