In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only if the write succeeds.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

Configuration 1 [-]

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

No data.

References
Link Providers
https://git.kernel.org/stable/c/256fe4162f8b5a1625b8603ca5f7ff79725bfb47 cve-icon cve-icon
https://git.kernel.org/stable/c/5621f7a8139053d0c3c47fb68ee9f602139eb40a cve-icon cve-icon
https://git.kernel.org/stable/c/5a6c373d761f55635e175fa2f407544bae8f583b cve-icon cve-icon
https://git.kernel.org/stable/c/6837910aeb2c9101fc036dcd1b1f32615c20ec1a cve-icon cve-icon
https://git.kernel.org/stable/c/6d18cedc1ef0caeb1567cab660079e48844ff6d6 cve-icon cve-icon
https://git.kernel.org/stable/c/7bd8d9e1cf5607ee14407f4060b9a1dbb3c42802 cve-icon cve-icon
https://git.kernel.org/stable/c/c5787d77a5c29fffd295d138bd118b334990a567 cve-icon cve-icon
https://git.kernel.org/stable/c/eb2133900cac2d2f78befd6be41666cf1a2315d9 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091627-CVE-2023-53295-046c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53295 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53295 cve-icon
History

Tue, 02 Dec 2025 19:30:00 +0000

Type Values Removed Values Added
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Metrics cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

Wed, 17 Sep 2025 11:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Wed, 17 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Tue, 16 Sep 2025 08:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only if the write succeeds.
Title udf: Do not update file length for failed writes to inline files
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-16T08:11:27.678Z

Updated: 2025-09-16T08:11:27.678Z

Reserved: 2025-09-16T08:09:37.993Z

Link: CVE-2023-53295

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2025-09-16T08:15:38.810

Modified: 2025-12-02T19:26:39.470

Link: CVE-2023-53295

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-16T00:00:00Z

Links: CVE-2023-53295 - Bugzilla