Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-53695

udf: Detect system inodes linked into directory hierarchy

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < 1dc71eeb198a8daa17d0c995998a53b0b749a158affected
  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < d747b31e2925a2f384e7dd1901a2e5bc5f984ed8affected
  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < a44ec34b90440ada190924f5908b97026504fdcdaffected
  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < 37e74003d81e79457535cbbdfa1603431c03fac0affected
  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < 1f328751b65c49c13a312d67a3bf27766b85baf7affected
  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < 9e3b5ef7d02eaa6553e79b4af9bd99227280f245affected
  • 6174c2eb8ecef271159bdcde460ce8af54d8f72f to < 85a37983ec69cc9fcd188bc37c4de15ee326355aaffected
  • 801c7a20d255e300ab51a6fcb1d0e218d136b16faffected
  • 3.17.2 to < 3.18affected

Linux Linux

Default version status: affected

  • 3.18affected
  • 0 to < 3.18unaffected
  • 4.19.278 to ≤ 4.19.*unaffected
  • 5.4.235 to ≤ 5.4.*unaffected
  • 5.10.173 to ≤ 5.10.*unaffected
  • 5.15.99 to ≤ 5.15.*unaffected
  • 6.1.16 to ≤ 6.1.*unaffected
  • 6.2.3 to ≤ 6.2.*unaffected
  • 6.3 to ≤ *unaffected

References