CVE-2023-53295

low-risk
Published 2025-09-16

In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only if the write succeeds.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (1)

Affected Vendors

Linux

References (8)

Patch https://git.kernel.org/stable/c/256fe4162f8b5a1625b8603ca5f7ff79725bfb47
Patch https://git.kernel.org/stable/c/5621f7a8139053d0c3c47fb68ee9f602139eb40a
Patch https://git.kernel.org/stable/c/5a6c373d761f55635e175fa2f407544bae8f583b
Patch https://git.kernel.org/stable/c/6837910aeb2c9101fc036dcd1b1f32615c20ec1a
Patch https://git.kernel.org/stable/c/6d18cedc1ef0caeb1567cab660079e48844ff6d6
Patch https://git.kernel.org/stable/c/7bd8d9e1cf5607ee14407f4060b9a1dbb3c42802
Patch https://git.kernel.org/stable/c/c5787d77a5c29fffd295d138bd118b334990a567
Patch https://git.kernel.org/stable/c/eb2133900cac2d2f78befd6be41666cf1a2315d9
23
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 5/34 · Minimal