PT-2025-38035 · Linux+3 · Linux Kernel+3

Published 2023-01-16 · Updated 2025-10-23 · CVE-2023-53317

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc1-syzkaller

Description The Linux kernel contains a flaw within the ext4 filesystem related to block bitmap validation. Specifically, the mb find extent function may trigger a warning due to inconsistencies between the expected number of blocks per group and the block bitmap data. This can occur when padding at the end of the block bitmap is not properly set, potentially leading to issues during filesystem operations.

Recommendations Update to a version of the Linux kernel that addresses this issue.

Exploit

Fix

Improper Check for Exceptional Conditions

Weakness Enumeration

CWE-754

Related Identifiers

ALSA-2025_16880

BDU:2026-03350

CVE-2023-53317

RHSA-2024:2394

RHSA-2024_2394

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Astra Linux

Linux Kernel

Red Hat

Suse

References · 992

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53317.json · Exploit
• https://git.kernel.org/stable/c/1b90fbc7590124c57a2e590de7fd07eba26606f1 · Patch
• https://git.kernel.org/stable/c/d55e76e11592a1d18a179c7fd34ca1b52632beb3 · Patch
• https://git.kernel.org/stable/c/dd45e536f47a82e0a405f9a4b6c7ceb367171ee9 · Patch
• https://bdu.fstec.ru/vul/2026-03350 · Security Note
• https://ubuntu.com/security/CVE-2023-53317 · Vendor Advisory
• https://git.kernel.org/stable/c/dba62fa84a8eac44a53a2862de8a40e5bdfa0ae3 · Patch
• https://git.kernel.org/stable/c/5d356d902e9d5b1aaaaf2326d365340fa8a90c1b · Patch
• https://cve.org/CVERecord?id=CVE-2023-53317 · Security Note
• https://git.kernel.org/stable/c/fa08a7b61dff8a4df11ff1e84abfc214b487caf7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53317 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53317 · Vendor Advisory
• https://git.kernel.org/stable/c/775b00ba23f6f916fe2ac60c5ff7fd0fe4f28d0d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3761-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53317 · Vendor Advisory