Log in Start free

Vulnerability · Published Sep 16, 2025 · Assigned by Linux

CVE-2023-53295udf: Do not update file length for failed writes to inline files

Medium 5.5

In plain English

A medium-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only if the write succeeds.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.20-1DEBIAN-CVE-2023-53295
Debian:13linux6.1.20-1DEBIAN-CVE-2023-53295
Debian:14linux6.1.20-1DEBIAN-CVE-2023-53295
Ubuntu:22.04:LTSlinux5.15.0-75.82UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-aws5.15.0-1038.43UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure5.15.0-1040.47UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1041.48.1UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-gcp5.15.0-1036.44UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-gke5.15.0-1036.41UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1022.27UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-ibm5.15.0-1032.35UBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1033.38UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-kvm5.15.0-1035.40UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-75.82UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1027.27UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1015.15UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-oracle5.15.0-1037.43UBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-raspi5.15.0-1032.35UBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53295
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-53295
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-53295

Affected products (as reported)

VendorProductVersions
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 5621f7a8139053d0c3c47fb68ee9f602139eb40a1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 5a6c373d761f55635e175fa2f407544bae8f583b1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 7bd8d9e1cf5607ee14407f4060b9a1dbb3c428021da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before eb2133900cac2d2f78befd6be41666cf1a2315d91da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before c5787d77a5c29fffd295d138bd118b334990a5671da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 6837910aeb2c9101fc036dcd1b1f32615c20ec1a1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 6d18cedc1ef0caeb1567cab660079e48844ff6d61da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 256fe4162f8b5a1625b8603ca5f7ff79725bfb47
Linux Linux 2.6.12

References