01 Record

CVE-2023-53683

fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.15% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 4.7% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-28.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-10-07 15:21Z1 YR AGO

Last updated

2026-08-05 09:15Z2 MO AGO

Reserved

2025-10-07

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-617Reachable AssertionBase

Data version

5.2

Document digest

63b429ec1400da8aafd3b96d61d8deac0a733ac86e459ed23a92de14791137fe

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf62f5ee63052324ad94dd05091743d9e09f72070 to < 61af77acd039ffd221bf7adf0dc95d0a4d377505, ab778439c6fa0071698b62a351f79d319fd72c53 to < c074913b12db3632b11588b31bbfb0fa80a0a1c9, 781fa141414ef18b52f15037497155f80bf0ecab to < a75d9211a07fed513c08c5d4861c4a36ac6a74fe, 1f881d9201f6e0a917004a14329f9ff3d0bfa1e5 to < c8daee66585897a4c90d937c91e762100237bff9, 48d9e2e6de01ed35e965eb549758a837c07b601d to < 37cab61a52d6f42b2d961c51bcf369f09e235fb5, 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb to < 48960a503fcec76d3f72347b7e679dda08ca43be, 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb to < 3a9d68d84b2e41ba3f2a727b36f035fad6800492, 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb to < 81b21c0f0138ff5a499eafc3eb0578ad2a99622c, 4.14.303 to < 4.14.316, 4.19.270 to < 4.19.284, 5.4.229 to < 5.4.244, 5.10.163 to < 5.10.181, 5.15.87 to < 5.15.113, 5.16—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/61af77acd039ffd221bf7adf0dc95d0a4d377505
git.kernel.orghttps://git.kernel.org/stable/c/c074913b12db3632b11588b31bbfb0fa80a0a1c9
git.kernel.orghttps://git.kernel.org/stable/c/a75d9211a07fed513c08c5d4861c4a36ac6a74fe
git.kernel.orghttps://git.kernel.org/stable/c/c8daee66585897a4c90d937c91e762100237bff9
git.kernel.orghttps://git.kernel.org/stable/c/37cab61a52d6f42b2d961c51bcf369f09e235fb5
git.kernel.orghttps://git.kernel.org/stable/c/48960a503fcec76d3f72347b7e679dda08ca43be
git.kernel.orghttps://git.kernel.org/stable/c/3a9d68d84b2e41ba3f2a727b36f035fad6800492
git.kernel.orghttps://git.kernel.org/stable/c/81b21c0f0138ff5a499eafc3eb0578ad2a99622c

07 Fixed in

Debian 12

linux
Fixed in 6.1.37-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.