CVE-2023-53295
In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write…
Does this matter?
Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: udf: Do not update file length for failed writes to inline files When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only if the write succeeds.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.14% probability · 4th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/256fe4162f8b5a1625b8603ca5f7ff79725bfb47Patch
- https://git.kernel.org/stable/c/5621f7a8139053d0c3c47fb68ee9f602139eb40aPatch
- https://git.kernel.org/stable/c/5a6c373d761f55635e175fa2f407544bae8f583bPatch
- https://git.kernel.org/stable/c/6837910aeb2c9101fc036dcd1b1f32615c20ec1aPatch
- https://git.kernel.org/stable/c/6d18cedc1ef0caeb1567cab660079e48844ff6d6Patch
- https://git.kernel.org/stable/c/7bd8d9e1cf5607ee14407f4060b9a1dbb3c42802Patch
- https://git.kernel.org/stable/c/c5787d77a5c29fffd295d138bd118b334990a567Patch
- https://git.kernel.org/stable/c/eb2133900cac2d2f78befd6be41666cf1a2315d9Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.