CVE-2023-53683

MEDIUM

Linux Kernel 4.14.303-4.14.315 - Reachable Assertion in hfsplus_cat_{read,write}_inode()

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

References (8)

Core 8

Scores

CVSS v3 5.5
EPSS 0.0013
EPSS Percentile 3.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-617
Status published
Products (24)
Linux/Linux < 5.16
Linux/Linux 1f881d9201f6e0a917004a14329f9ff3d0bfa1e5 - c8daee66585897a4c90d937c91e762100237bff9
Linux/Linux 4.14.303 - 4.14.316
Linux/Linux 4.14.316 - 4.14.*
Linux/Linux 4.19.270 - 4.19.284
Linux/Linux 4.19.284 - 4.19.*
Linux/Linux 48d9e2e6de01ed35e965eb549758a837c07b601d - 37cab61a52d6f42b2d961c51bcf369f09e235fb5
Linux/Linux 5.10.163 - 5.10.181
Linux/Linux 5.10.181 - 5.10.*
Linux/Linux 5.15.113 - 5.15.*
... and 14 more
Published Oct 07, 2025
Tracked Since Feb 18, 2026