01 Record

CVE-2023-53820

loop: loop_set_status_from_info() check before assignment

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

loop: loop_set_status_from_info() check before assignment

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.27% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 19.8% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Deferred. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-12-09 01:24Z10 MO AGO

Last updated

2026-05-23 15:31Z5 MO AGO

Reserved

2025-12-08

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-190Integer Overflow or WraparoundBase

Data version

5.2

Document digest

fb21e01c89b04f7d4d6abda5632b9b69066db118882b3e467f4e1e968e49168f

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2035c770bfdbcc82bd52e05871a7c82db9529e0f to < 6bdf4e6dfb60cbb6121ccf027d97ed2ec97c0bcb, a217715338fd48f72114725aa7a40e484a781ca7 to < 832580af82ace363205039a8e7c4ef04552ccc1a, 13b2856037a651ba3ab4a8b25ecab3e791926da3 to < 2ea7077748e5d7cc64f1c31342c802fe66ea7426, b40877b8562c5720d0a7fce20729f56b75a3dede to < 861021710bba9dfa0749a3c209a6c1773208b1f1, 6858933131d0dadac071c4d33335a9ea4b8e76cf to < c79a924ed6afac1708dfd370ba66bcf6a852ced6, 0455bef69028c65065f16bb04635591b2374249b to < 3e7d0968203d668af6036b9f9199c7b62c8a3581, c490a0b5a4f36da3918181a8acdc6991d967c5f3 to < 4be26d553a3f1d4f54f25353d1496c562002126d, c490a0b5a4f36da3918181a8acdc6991d967c5f3 to < 258809bf22bf71d53247856f374f2b1d055f2fd4, c490a0b5a4f36da3918181a8acdc6991d967c5f3 to < 9f6ad5d533d1c71e51bdd06a5712c4fbc8768dfa, 18e28817cb516b39de6281f6db9b0618b2cc7b42, adf0112d9b8acb03485624220b4934f69bf13369, 9be7fa7ead18a48940df7b59d993bbc8b9055c15, 4.19.257 to < 4.19.312, 5.4.212 to < 5.4.274, 5.10.140 to < 5.10.173, 5.15.64 to < 5.15.100, 4.9.327 to < 4.10, 4.14.292 to < 4.15, 5.19.6 to < 5.20, 6.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6bdf4e6dfb60cbb6121ccf027d97ed2ec97c0bcb
git.kernel.orghttps://git.kernel.org/stable/c/832580af82ace363205039a8e7c4ef04552ccc1a
git.kernel.orghttps://git.kernel.org/stable/c/2ea7077748e5d7cc64f1c31342c802fe66ea7426
git.kernel.orghttps://git.kernel.org/stable/c/861021710bba9dfa0749a3c209a6c1773208b1f1
git.kernel.orghttps://git.kernel.org/stable/c/c79a924ed6afac1708dfd370ba66bcf6a852ced6
git.kernel.orghttps://git.kernel.org/stable/c/3e7d0968203d668af6036b9f9199c7b62c8a3581
git.kernel.orghttps://git.kernel.org/stable/c/4be26d553a3f1d4f54f25353d1496c562002126d
git.kernel.orghttps://git.kernel.org/stable/c/258809bf22bf71d53247856f374f2b1d055f2fd4
git.kernel.orghttps://git.kernel.org/stable/c/9f6ad5d533d1c71e51bdd06a5712c4fbc8768dfa

07 Fixed in

Debian 12

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.