GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53683 (GCVE-0-2023-53683)

Vulnerability from cvelistv5 – Published: 2025-10-07 15:21 – Updated: 2026-08-05 09:15
VLAI
Title
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
Summary
In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.
Severity
7.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: f62f5ee63052324ad94dd05091743d9e09f72070 , < 61af77acd039ffd221bf7adf0dc95d0a4d377505 (git)
Affected: ab778439c6fa0071698b62a351f79d319fd72c53 , < c074913b12db3632b11588b31bbfb0fa80a0a1c9 (git)
Affected: 781fa141414ef18b52f15037497155f80bf0ecab , < a75d9211a07fed513c08c5d4861c4a36ac6a74fe (git)
Affected: 1f881d9201f6e0a917004a14329f9ff3d0bfa1e5 , < c8daee66585897a4c90d937c91e762100237bff9 (git)
Affected: 48d9e2e6de01ed35e965eb549758a837c07b601d , < 37cab61a52d6f42b2d961c51bcf369f09e235fb5 (git)
Affected: 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb , < 48960a503fcec76d3f72347b7e679dda08ca43be (git)
Affected: 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb , < 3a9d68d84b2e41ba3f2a727b36f035fad6800492 (git)
Affected: 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb , < 81b21c0f0138ff5a499eafc3eb0578ad2a99622c (git)
Affected: 4.14.303 , < 4.14.316 (semver)
Affected: 4.19.270 , < 4.19.284 (semver)
Affected: 5.4.229 , < 5.4.244 (semver)
Affected: 5.10.163 , < 5.10.181 (semver)
Affected: 5.15.87 , < 5.15.113 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.16
Unaffected: 0 , < 5.16 (semver)
Unaffected: 4.14.316 , ≤ 4.14.* (semver)
Unaffected: 4.19.284 , ≤ 4.19.* (semver)
Unaffected: 5.4.244 , ≤ 5.4.* (semver)
Unaffected: 5.10.181 , ≤ 5.10.* (semver)
Unaffected: 5.15.113 , ≤ 5.15.* (semver)
Unaffected: 6.1.30 , ≤ 6.1.* (semver)
Unaffected: 6.3.4 , ≤ 6.3.* (semver)
Unaffected: 6.4 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/hfsplus/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "61af77acd039ffd221bf7adf0dc95d0a4d377505",
              "status": "affected",
              "version": "f62f5ee63052324ad94dd05091743d9e09f72070",
              "versionType": "git"
            },
            {
              "lessThan": "c074913b12db3632b11588b31bbfb0fa80a0a1c9",
              "status": "affected",
              "version": "ab778439c6fa0071698b62a351f79d319fd72c53",
              "versionType": "git"
            },
            {
              "lessThan": "a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
              "status": "affected",
              "version": "781fa141414ef18b52f15037497155f80bf0ecab",
              "versionType": "git"
            },
            {
              "lessThan": "c8daee66585897a4c90d937c91e762100237bff9",
              "status": "affected",
              "version": "1f881d9201f6e0a917004a14329f9ff3d0bfa1e5",
              "versionType": "git"
            },
            {
              "lessThan": "37cab61a52d6f42b2d961c51bcf369f09e235fb5",
              "status": "affected",
              "version": "48d9e2e6de01ed35e965eb549758a837c07b601d",
              "versionType": "git"
            },
            {
              "lessThan": "48960a503fcec76d3f72347b7e679dda08ca43be",
              "status": "affected",
              "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
              "versionType": "git"
            },
            {
              "lessThan": "3a9d68d84b2e41ba3f2a727b36f035fad6800492",
              "status": "affected",
              "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
              "versionType": "git"
            },
            {
              "lessThan": "81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
              "status": "affected",
              "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
              "versionType": "git"
            },
            {
              "lessThan": "4.14.316",
              "status": "affected",
              "version": "4.14.303",
              "versionType": "semver"
            },
            {
              "lessThan": "4.19.284",
              "status": "affected",
              "version": "4.19.270",
              "versionType": "semver"
            },
            {
              "lessThan": "5.4.244",
              "status": "affected",
              "version": "5.4.229",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.181",
              "status": "affected",
              "version": "5.10.163",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.113",
              "status": "affected",
              "version": "5.15.87",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/hfsplus/inode.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.16"
            },
            {
              "lessThan": "5.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.14.*",
              "status": "unaffected",
              "version": "4.14.316",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.284",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.244",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.181",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.113",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.30",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.3.*",
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.14.316",
                  "versionStartIncluding": "4.14.303",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.284",
                  "versionStartIncluding": "4.19.270",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.244",
                  "versionStartIncluding": "5.4.229",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.181",
                  "versionStartIncluding": "5.10.163",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.113",
                  "versionStartIncluding": "5.15.87",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.30",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3.4",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.4",
                  "versionStartIncluding": "5.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n\nsyzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for\ncrafted filesystem image can contain bogus length. There conditions are\nnot kernel bugs that can justify kernel to panic."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires the crafted HFS+ image to be attached locally as a block/loop device and mounted, with the corrupt catalog record parsed by the local kernel. There is no network-facing path into the hfsplus catalog btree code.\nAC:L - The attacker fully authors the on-disk image, so `fd-\u003eentrylength` and `fd-\u003eentryoffset` are deterministic attacker-chosen u16 values from the record-offset table; no race, timing window, or uncontrollable memory layout is needed to reach the failed sanity check and the subsequent unbounded `hfs_bnode_read()`/`hfs_bnode_write()`.\nPR:L - Only ordinary local user access is required in the realistic scenario: an unprivileged logged-in user inserts an HFS+-formatted USB stick or SD card that udisks2/systemd automounts, and post-mount `hfsplus_cat_write_inode()` fires from normal writeback with no further privilege. This matches the scoring of the sibling fix CVE-2023-54130.\nUI:N - The attacker performs the mount themselves (or triggers automount by inserting their own media) and the write path is then reached automatically via inode writeback; no separate victim action is required.\nS:U - The out-of-bounds access and resulting corruption stay within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - Continuing past the failed length check makes `hfs_bnode_read()` index past `node-\u003epage[]` and dereference an adjacent-heap value as a `struct page *`, copying arbitrary kernel memory into the catalog entry, which is then exposed to userspace through `i_size`, uid/gid/mode, and `init_special_inode()` rdev.\nI:H - `hfsplus_cat_write_inode()` performs `hfs_bnode_write()` of a full 88/248-byte record at the unvalidated offset, giving an out-of-bounds kernel write (plus `set_page_dirty()` on a bogus pointer) with partially attacker-influenced contents \u2014 a corruption primitive usable for control-flow hijack, and at minimum silent metadata corruption.\nA:H - The `WARN_ON()` itself panics the kernel on `panic_on_warn=1` systems, and the wild `struct page *` dereference that follows reliably oopses or panics the kernel."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T09:15:32.980Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/61af77acd039ffd221bf7adf0dc95d0a4d377505"
        },
        {
          "url": "https://git.kernel.org/stable/c/c074913b12db3632b11588b31bbfb0fa80a0a1c9"
        },
        {
          "url": "https://git.kernel.org/stable/c/a75d9211a07fed513c08c5d4861c4a36ac6a74fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/c8daee66585897a4c90d937c91e762100237bff9"
        },
        {
          "url": "https://git.kernel.org/stable/c/37cab61a52d6f42b2d961c51bcf369f09e235fb5"
        },
        {
          "url": "https://git.kernel.org/stable/c/48960a503fcec76d3f72347b7e679dda08ca43be"
        },
        {
          "url": "https://git.kernel.org/stable/c/3a9d68d84b2e41ba3f2a727b36f035fad6800492"
        },
        {
          "url": "https://git.kernel.org/stable/c/81b21c0f0138ff5a499eafc3eb0578ad2a99622c"
        }
      ],
      "title": "fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53683",
    "datePublished": "2025-10-07T15:21:36.715Z",
    "dateReserved": "2025-10-07T15:16:59.664Z",
    "dateUpdated": "2026-08-05T09:15:32.980Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53683",
      "date": "2026-09-19",
      "epss": "0.00153",
      "percentile": "0.04833"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "fs/hfsplus/inode.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "61af77acd039ffd221bf7adf0dc95d0a4d377505",
                    "status": "affected",
                    "version": "f62f5ee63052324ad94dd05091743d9e09f72070",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c074913b12db3632b11588b31bbfb0fa80a0a1c9",
                    "status": "affected",
                    "version": "ab778439c6fa0071698b62a351f79d319fd72c53",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
                    "status": "affected",
                    "version": "781fa141414ef18b52f15037497155f80bf0ecab",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "c8daee66585897a4c90d937c91e762100237bff9",
                    "status": "affected",
                    "version": "1f881d9201f6e0a917004a14329f9ff3d0bfa1e5",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "37cab61a52d6f42b2d961c51bcf369f09e235fb5",
                    "status": "affected",
                    "version": "48d9e2e6de01ed35e965eb549758a837c07b601d",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "48960a503fcec76d3f72347b7e679dda08ca43be",
                    "status": "affected",
                    "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "3a9d68d84b2e41ba3f2a727b36f035fad6800492",
                    "status": "affected",
                    "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
                    "status": "affected",
                    "version": "55d1cbbbb29e6656c662ee8f73ba1fc4777532eb",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "4.14.316",
                    "status": "affected",
                    "version": "4.14.303",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "4.19.284",
                    "status": "affected",
                    "version": "4.19.270",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.4.244",
                    "status": "affected",
                    "version": "5.4.229",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.10.181",
                    "status": "affected",
                    "version": "5.10.163",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "5.15.113",
                    "status": "affected",
                    "version": "5.15.87",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "fs/hfsplus/inode.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.16"
                  },
                  {
                    "lessThan": "5.16",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.14.*",
                    "status": "unaffected",
                    "version": "4.14.316",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "4.19.*",
                    "status": "unaffected",
                    "version": "4.19.284",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.4.*",
                    "status": "unaffected",
                    "version": "5.4.244",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.181",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.113",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.30",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.3.*",
                    "status": "unaffected",
                    "version": "6.3.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "6.4",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "AF7207EA-C162-450C-AA30-DE558BD497E2",
                    "versionEndExcluding": "4.14.316",
                    "versionStartIncluding": "4.14.303",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "CB7C806A-AE4E-471E-9614-A01625D268BE",
                    "versionEndExcluding": "4.19.284",
                    "versionStartIncluding": "4.19.270",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "76B9EF77-FF34-4AE4-A53B-EF1690C155BB",
                    "versionEndExcluding": "5.4.244",
                    "versionStartIncluding": "5.4.229",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "94570266-A638-4ABF-8867-9E4E9E02E3FC",
                    "versionEndExcluding": "5.10.181",
                    "versionStartIncluding": "5.10.163",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FA7B71C8-9572-46A3-BB60-4A67171DD3E1",
                    "versionEndExcluding": "5.15.113",
                    "versionStartIncluding": "5.15.87",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E9430E62-03EA-42E6-9E5E-BD1D5124D107",
                    "versionEndExcluding": "6.1.30",
                    "versionStartIncluding": "5.16",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "26C54BF0-3EED-46D4-92A7-5F07F658B49B",
                    "versionEndExcluding": "6.3.4",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()\n\nsyzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for\ncrafted filesystem image can contain bogus length. There conditions are\nnot kernel bugs that can justify kernel to panic."
          }
        ],
        "id": "CVE-2023-53683",
        "lastModified": "2026-08-04T10:19:17.977",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 5.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.6,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ]
        },
        "published": "2025-10-07T16:15:52.530",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/37cab61a52d6f42b2d961c51bcf369f09e235fb5"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/3a9d68d84b2e41ba3f2a727b36f035fad6800492"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/48960a503fcec76d3f72347b7e679dda08ca43be"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/61af77acd039ffd221bf7adf0dc95d0a4d377505"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/81b21c0f0138ff5a499eafc3eb0578ad2a99622c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/a75d9211a07fed513c08c5d4861c4a36ac6a74fe"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/c074913b12db3632b11588b31bbfb0fa80a0a1c9"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "tags": [
              "Patch"
            ],
            "url": "https://git.kernel.org/stable/c/c8daee66585897a4c90d937c91e762100237bff9"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-617"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-08-04T23:18:56+00:00",
      "cve": "CVE-2023-53683",
      "id": "CVE-2023-53683",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "14",
      "product_status:known_not_affected": "260",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53683.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-03T00:29:51Z",
      "cve": "CVE-2023-53683",
      "id": "CVE-2023-53683",
      "initial_release_date": "2025-10-07T23:46:59Z",
      "product_status:known_affected": "354",
      "product_status:known_not_affected": "337",
      "product_status:recommended": "219",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53683",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53683.json",
      "version": "25"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.