CVE-2023-53295 — Missing Report of Error Condition in Linux
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 97.47%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 16
Description
In the Linux kernel, the following vulnerability has been resolved:
udf: Do not update file length for failed writes to inline files
When write to inline file fails (or happens only partly), we still
updated length of inline data as if the whole write succeeded. Fix the
update of length of inline data to happen only if the write succeeds.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages4 packages
▶CVEListV5linux/linux1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 — 5621f7a8139053d0c3c47fb68ee9f602139eb40a+8
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-482h-wv29-vp5r: In the Linux kernel, the following vulnerability has been resolved:
udf: Do not update file length for failed writes to inline files
When write to i↗2025-09-16
OSV▶
CVE-2023-53295: In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inl↗2025-09-16