CVE-2023-53683

MEDIUM

MEDIUM Priority: 0.01 BB Relevance: 36/100

Published: 2025-10-07 Modified: 2026-10-28 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Unchanged

C: None

I: None

A: High

Description

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

Weakness Classification (1)

CWE-617

Affected Software (14)

Vendor	Product	Version
linux	linux_kernel	4.14.303 – 4.14.316
linux	linux_kernel	4.19.270 – 4.19.284
linux	linux_kernel	5.4.229 – 5.4.244
linux	linux_kernel	5.10.163 – 5.10.181
linux	linux_kernel	5.15.87 – 5.15.113
linux	linux_kernel	5.16 – 6.1.30
linux	linux_kernel	6.2 – 6.3.4
linux	linux_kernel	4.14.303 – 4.14.316
linux	linux_kernel	4.19.270 – 4.19.284
linux	linux_kernel	5.4.229 – 5.4.244
linux	linux_kernel	5.10.163 – 5.10.181
linux	linux_kernel	5.15.87 – 5.15.113
linux	linux_kernel	5.16 – 6.1.30
linux	linux_kernel	6.2 – 6.3.4