VYPR
High severity7.1NVD Advisory· Published Sep 16, 2025· Updated Aug 4, 2026

CVE-2023-53285

CVE-2023-53285

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: add bounds checking in get_max_inline_xattr_value_size()

Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file system is mounted, it's possible for the inode table to get corrupted. Add bounds checking to avoid reading beyond the end of allocated memory if this happens.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Linux/Kernel4 versions
    cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: <4.14.315
    • cpe:2.3:o:linux:linux_kernel:6.4:rc1:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 3.8
  • osv-coords
    Range: >= 3.8.0, < 4.14.315

Patches

Vulnerability mechanics

References

9

News mentions

0

No linked articles in our index yet.