01 Record

CVE-2023-53311

nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.16% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 5.7% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Modified. NVD last modified this record on 2026-06-17.

Red Hat severity

No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-16 16:11Z11 MO AGO

Last updated

2026-08-05 09:13Z1 MO AGO

Reserved

2025-09-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-416Use After FreeVariant

Data version

5.2

Document digest

af60e2ecb46141bfd04f90af8db7c54bb5fead788b6f387095aedaa210c5e94c

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < 11afd67f1b3c28eb216e50a3ca8dbcb69bb71793, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < a3c3b4cbf9b8554120fb230e6516e980c6277487, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < d2c539c216cce74837a9cf5804eb205939b82227, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < 37207240872456fbab44a110bde6640445233963, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < 3645510cf926e6af2f4d44899370d7e5331c93bd, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < 7532ff6edbf5242376b24a95a2fefb59bb653e5a, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < 5828d5f5dc877dcfdd7b23102e978e2ecfd86d82, 0ae45f63d4ef8d8eeec49c7d8b44a1775fff13e8 to < f8654743a0e6909dc634cbfad6db6816f10f3399, 4.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/11afd67f1b3c28eb216e50a3ca8dbcb69bb71793
git.kernel.orghttps://git.kernel.org/stable/c/a3c3b4cbf9b8554120fb230e6516e980c6277487
git.kernel.orghttps://git.kernel.org/stable/c/d2c539c216cce74837a9cf5804eb205939b82227
git.kernel.orghttps://git.kernel.org/stable/c/37207240872456fbab44a110bde6640445233963
git.kernel.orghttps://git.kernel.org/stable/c/3645510cf926e6af2f4d44899370d7e5331c93bd
git.kernel.orghttps://git.kernel.org/stable/c/7532ff6edbf5242376b24a95a2fefb59bb653e5a
git.kernel.orghttps://git.kernel.org/stable/c/5828d5f5dc877dcfdd7b23102e978e2ecfd86d82
git.kernel.orghttps://git.kernel.org/stable/c/f8654743a0e6909dc634cbfad6db6816f10f3399

01 Record index

CVE-2023-53311

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-53311

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References