CVE-2023-53165

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-09-15 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical impact is that the name may be prepended a "unification hash" when it is not actually needed but still it is good to fix this.

Weakness Classification (1)

Affected Software (10)

VendorProductVersion
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < 008ae78d1e12efa904dc819b1ec83e2bca6b2c56
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < b37f998d357102e8eb0f8eeb33f03fff22e49cbf
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < 3f1368af47acf4d0b2a5fb0d2c0d6919d2234b6d
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < 4503f6fc95d6dee85fb2c54785848799e192c51c
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < 985f9666698960dfc87a106d6314203fa90fda75
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < a6824149809395dfbb5bc36bc7057cc3cb84e56d
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < 4d50988da0db167aed6f38685145cb5cd526c4f8
Linux Linux 484a10f49387e4386bf2708532e75bf78ffea2cb < 028f6055c912588e6f72722d89c30b401bbcf013
Linux Linux 4.6
linux linux_kernel 4.6 – 4.14.324

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.16%
Raw Score 0.001610
Percentile 5.4%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00161
2026-11-13
0.00161
2026-11-12
0.00160
2026-11-10
0.00160
2026-11-09
0.00160
2026-11-08
0.00160
2026-11-07
0.00160
2026-11-06
0.00160
2026-11-05
0.00160

Intelligence Sources

mitre ref →
nvd ref →