CVE-2023-53295

udf: Do not update file length for failed writes to inline files

State: Published
Severity: 5.5 Medium
Published: Sep 16, 2025
Updated: May 11, 2026
Reserved: Sep 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

udf: Do not update file length for failed writes to inline files

When write to inline file fails (or happens only partly), we still updated length of inline data as if the whole write succeeded. Fix the update of length of inline data to happen only if the write succeeds.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5621f7a8139053d0c3c47fb68ee9f602139eb40aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5a6c373d761f55635e175fa2f407544bae8f583bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7bd8d9e1cf5607ee14407f4060b9a1dbb3c42802Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eb2133900cac2d2f78befd6be41666cf1a2315d9Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c5787d77a5c29fffd295d138bd118b334990a567Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6837910aeb2c9101fc036dcd1b1f32615c20ec1aAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6d18cedc1ef0caeb1567cab660079e48844ff6d6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 256fe4162f8b5a1625b8603ca5f7ff79725bfb47Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.14.308 through 4.14.Not affected 4.19.276 through 4.19.Not affected 5.4.235 through 5.4.Not affected 5.10.173 through 5.10.Not affected 5.15.99 through 5.15.Not affected 6.1.16 through 6.1.Not affected 6.2.3 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5621f7a8139053d0c3c47fb68ee9f602139eb40aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5a6c373d761f55635e175fa2f407544bae8f583bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7bd8d9e1cf5607ee14407f4060b9a1dbb3c42802Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before eb2133900cac2d2f78befd6be41666cf1a2315d9Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c5787d77a5c29fffd295d138bd118b334990a567Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6837910aeb2c9101fc036dcd1b1f32615c20ec1aAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6d18cedc1ef0caeb1567cab660079e48844ff6d6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 256fe4162f8b5a1625b8603ca5f7ff79725bfb47Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.14.308 through 4.14.*Not affected
4.19.276 through 4.19.*Not affected
5.4.235 through 5.4.*Not affected
5.10.173 through 5.10.*Not affected
5.15.99 through 5.15.*Not affected
6.1.16 through 6.1.*Not affected
6.2.3 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.