01 Record

CVE-2023-53804

nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 3.2% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Deferred. NVD last modified this record on 2026-08-04.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-09 00:01Z10 MO AGO
Last updated: 2026-08-05 09:16Z2 MO AGO
Reserved: 2025-12-08
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 8218959422b0126bc8a0e7ee925ef45f3b4639ee60a702e030393ac4dba4ab1c

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxe912a5b66837ee89fb025e67b5efeaa11930c2ce to < f31e18131ee2ce80a4da5c808221d25b1ae9ad6d, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < 2a782ea8ebd712a458466e3103e2881b4f886cb5, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < 116d53f09ff52e6f98e3fe1f85d8898d6ba26c68, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < 6b4205ea97901f822004e6c8d59484ccfda03faa, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < b8427b8522d9ede53015ba45a9978ba68d1162f5, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < acc2a40e428f12780004e1e9fce4722d88f909fd, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < fb8e8d58f116d069e5939e1f786ac84e7fa4533e, e912a5b66837ee89fb025e67b5efeaa11930c2ce to < 9b5a04ac3ad9898c4745cba46ea26de74ba56a8e, 2.6.37—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/f31e18131ee2ce80a4da5c808221d25b1ae9ad6d
git.kernel.orghttps://git.kernel.org/stable/c/2a782ea8ebd712a458466e3103e2881b4f886cb5
git.kernel.orghttps://git.kernel.org/stable/c/116d53f09ff52e6f98e3fe1f85d8898d6ba26c68
git.kernel.orghttps://git.kernel.org/stable/c/6b4205ea97901f822004e6c8d59484ccfda03faa
git.kernel.orghttps://git.kernel.org/stable/c/b8427b8522d9ede53015ba45a9978ba68d1162f5
git.kernel.orghttps://git.kernel.org/stable/c/acc2a40e428f12780004e1e9fce4722d88f909fd
git.kernel.orghttps://git.kernel.org/stable/c/fb8e8d58f116d069e5939e1f786ac84e7fa4533e
git.kernel.orghttps://git.kernel.org/stable/c/9b5a04ac3ad9898c4745cba46ea26de74ba56a8e

07 Fixed in

Debian 12

linux
Fixed in 6.1.37-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.3.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.