Medium severity5.5NVD Advisory· Published Jul 6, 2023· Updated Jun 17, 2026

CVE-2023-37454

Description

An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c. NOTE: the suse.com reference has a different perspective about this.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernelllm-fuzzy3 versions
<=6.4.2+ 2 more
- (no CPE)range: <=6.4.2
- (no CPE)
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <=6.4.2

Patches

Vulnerability mechanics

References

syzkaller.appspot.com/bugnvdExploitMailing ListThird Party Advisory
syzkaller.appspot.com/bugnvdExploitMailing ListThird Party Advisory
syzkaller.appspot.com/bugnvdExploitMailing ListThird Party Advisory
bugzilla.suse.com/show_bug.cginvd
git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/nvd
lore.kernel.org/all/00000000000056e02f05dfb6e11a%40google.com/T/nvd

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000