{"api_version":"1","generated_at":"2026-08-27T14:14:30+00:00","cve":"CVE-2023-53695","urls":{"html":"https://cve.report/CVE-2023-53695","api":"https://cve.report/api/cve/CVE-2023-53695.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-53695","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-53695"},"summary":{"title":"udf: Detect system inodes linked into directory hierarchy","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa.","state":"PUBLISHED","assigner":"Linux","published_at":"2025-10-22 14:15:44","updated_at":"2026-08-04 10:19:18"},"problem_types":[],"metrics":[{"version":"3.1","source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","type":"Secondary","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"DECLARED","score":"7.8","severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","data":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"references":[{"url":"https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245","name":"https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a","name":"https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0","name":"https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8","name":"https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7","name":"https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd","name":"https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158","name":"https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-53695","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53695","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f 1dc71eeb198a8daa17d0c995998a53b0b749a158 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f d747b31e2925a2f384e7dd1901a2e5bc5f984ed8 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f a44ec34b90440ada190924f5908b97026504fdcd git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f 37e74003d81e79457535cbbdfa1603431c03fac0 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f 1f328751b65c49c13a312d67a3bf27766b85baf7 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f 9e3b5ef7d02eaa6553e79b4af9bd99227280f245 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6174c2eb8ecef271159bdcde460ce8af54d8f72f 85a37983ec69cc9fcd188bc37c4de15ee326355a git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 801c7a20d255e300ab51a6fcb1d0e218d136b16f git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3.17.2 3.18 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3.18","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 3.18 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 4.19.278 4.19.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.4.235 5.4.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.10.173 5.10.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.15.99 5.15.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.1.16 6.1.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.2.3 6.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.3 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2023","cve_id":"53695","cve":"CVE-2023-53695","epss":"0.001550000","percentile":"0.051360000","score_date":"2026-08-05","updated_at":"2026-08-06 00:00:37"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/udf/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"1dc71eeb198a8daa17d0c995998a53b0b749a158","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"lessThan":"d747b31e2925a2f384e7dd1901a2e5bc5f984ed8","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"lessThan":"a44ec34b90440ada190924f5908b97026504fdcd","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"lessThan":"37e74003d81e79457535cbbdfa1603431c03fac0","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"lessThan":"1f328751b65c49c13a312d67a3bf27766b85baf7","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"lessThan":"9e3b5ef7d02eaa6553e79b4af9bd99227280f245","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"lessThan":"85a37983ec69cc9fcd188bc37c4de15ee326355a","status":"affected","version":"6174c2eb8ecef271159bdcde460ce8af54d8f72f","versionType":"git"},{"status":"affected","version":"801c7a20d255e300ab51a6fcb1d0e218d136b16f","versionType":"git"},{"lessThan":"3.18","status":"affected","version":"3.17.2","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["fs/udf/inode.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.18"},{"lessThan":"3.18","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"4.19.*","status":"unaffected","version":"4.19.278","versionType":"semver"},{"lessThanOrEqual":"5.4.*","status":"unaffected","version":"5.4.235","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.173","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.99","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.16","versionType":"semver"},{"lessThanOrEqual":"6.2.*","status":"unaffected","version":"6.2.3","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"6.3","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"4.19.278","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.4.235","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.173","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.99","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.16","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.2.3","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.3","versionStartIncluding":"3.18","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.17.2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa."}],"metrics":[{"cvssV3_1":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"}}],"providerMetadata":{"dateUpdated":"2026-08-04T09:16:09.020Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158"},{"url":"https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8"},{"url":"https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd"},{"url":"https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0"},{"url":"https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7"},{"url":"https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245"},{"url":"https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a"}],"title":"udf: Detect system inodes linked into directory hierarchy","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2023-53695","datePublished":"2025-10-22T13:23:36.524Z","dateReserved":"2025-10-22T13:21:37.344Z","dateUpdated":"2026-08-04T09:16:09.020Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-10-22 14:15:44","lastModifiedDate":"2026-08-04 10:19:18","problem_types":[],"metrics":{"cvssMetricV31":[{"source":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":7.8,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.8,"impactScore":5.9}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2023","CveId":"53695","Ordinal":"1","Title":"udf: Detect system inodes linked into directory hierarchy","CVE":"CVE-2023-53695","Year":"2023"},"notes":[{"CveYear":"2023","CveId":"53695","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Detect system inodes linked into directory hierarchy\n\nWhen UDF filesystem is corrupted, hidden system inodes can be linked\ninto directory hierarchy which is an avenue for further serious\ncorruption of the filesystem and kernel confusion as noticed by syzbot\nfuzzed images. Refuse to access system inodes linked into directory\nhierarchy and vice versa.","Type":"Description","Title":"udf: Detect system inodes linked into directory hierarchy"}]}}}