HighFix available
udf: Detect system inodes linked into directory hierarchy
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 4.19.278, 5.10.173, 5.15.99, 5.4.235, 6.1.16, 6.2.3
- CVEs
- CVE-2023-53695
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 23:12 UTC · Revision 1
Source evidence
udf: Detect system inodes linked into directory hierarchy
core-osv · Original sourcePublished 22 Oct 2025, 13:23 UTC
In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.
osv:CVE-2023-53695
Kernel
Fixed versions: 4.19.278, 5.4.235, 5.10.173, 5.15.99, 6.1.16, 6.2.3
Complete source record
{
"id": "0a8850b8b74f297fac7125f125761482563630410cc5f92c33b5809b0968e71d",
"url": "https://osv.dev/vulnerability/CVE-2023-53695",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "udf: Detect system inodes linked into directory hierarchy",
"summary": "In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.",
"evidence": "osv:CVE-2023-53695",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.19.278",
"evidence": "/affected/1/ranges"
},
{
"value": "5.4.235",
"evidence": "/affected/1/ranges"
},
{
"value": "5.10.173",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.99",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.16",
"evidence": "/affected/1/ranges"
},
{
"value": "6.2.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "high",
"structured": {
"id": "CVE-2023-53695",
"aliases": [
"CVE-2023-53695"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6174c2eb8ecef271159bdcde460ce8af54d8f72f"
},
{
"fixed": "1dc71eeb198a8daa17d0c995998a53b0b749a158"
},
{
"fixed": "d747b31e2925a2f384e7dd1901a2e5bc5f984ed8"
},
{
"fixed": "a44ec34b90440ada190924f5908b97026504fdcd"
},
{
"fixed": "37e74003d81e79457535cbbdfa1603431c03fac0"
},
{
"fixed": "1f328751b65c49c13a312d67a3bf27766b85baf7"
},
{
"fixed": "9e3b5ef7d02eaa6553e79b4af9bd99227280f245"
},
{
"fixed": "85a37983ec69cc9fcd188bc37c4de15ee326355a"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "3.17.2"
},
{
"fixed": "3.18"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "801c7a20d255e300ab51a6fcb1d0e218d136b16f"
}
]
}
],
"versions": [
"v3.17.8",
"v3.17.7",
"v3.17.6",
"v3.17.5",
"v3.17.4",
"v3.17.3",
"v3.17.2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53695.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.18.0"
},
{
"fixed": "4.19.278"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "4.20.0"
},
{
"fixed": "5.4.235"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.5.0"
},
{
"fixed": "5.10.173"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.99"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.16"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.2.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53695.json"
}
}
],
"modified": "2026-10-30T02:30:41.502887458Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158",
"https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7",
"https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0",
"https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a",
"https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245",
"https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd",
"https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53695.json",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53695",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53695.json"
}
},
"related_cves": [
{
"value": "CVE-2023-53695",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 490785,
"published_at": "2025-10-22T13:23:36.524+00:00"
}