CVE-2023-53796 — Linux vulnerability
6 documents5 sources
Severity
—N/A
No vectorEPSS
0.0%
top 85.68%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 9
Description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix information leak in f2fs_move_inline_dirents()
When converting an inline directory to a regular one, f2fs is leaking
uninitialized memory to disk because it doesn't initialize the entire
directory block. Fix this by zero-initializing the block.
This bug was introduced by commit 4ec17d688d74 ("f2fs: avoid unneeded
initializing when converting inline dentry"), which didn't consider the
security implications of leaking…
Affected Packages4 packages
▶CVEListV5linux/linux4ec17d688d74b6b7cb10043c57ff4818cde2b0ca — 4e3b4b170bd43db1d8a93a6bd0ea434b17cc86f7+8
🔴Vulnerability Details
3GHSA▶
GHSA-g2pf-697j-2r49: In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix information leak in f2fs_move_inline_dirents()
When converting an inli↗2025-12-09
OSV▶
CVE-2023-53796: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fs_move_inline_dirents() When converting an inline↗2025-12-09