PT-2025-40180 · Linux+2 · Linux Kernel+2

Published 2023-05-06 · Updated 2026-03-14 · CVE-2023-53473

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue was identified in the Linux kernel related to error handling within the ext4 dirhash() function. Specifically, the function may fail when handling encrypted, casefolded file names, a scenario that was not adequately addressed in previous implementations. Callers of ext4 dirhash() did not consistently check for failures and propagate errors appropriately. This could lead to unexpected behavior or potential system instability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2026-03267

CVE-2023-53473

RHSA-2024:2394

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Debian

Linux Kernel

Suse

References · 866

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53473.json · Exploit
• https://git.kernel.org/stable/c/70d579aefa652a06af97e013e3fbbabbe5a43553 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53473 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03267 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-53473 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53473 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53473 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53473 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03615-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53473 · Vendor Advisory
• https://git.kernel.org/stable/c/b2531936118deb3f479c4fa1bcd787b74b8faa6a · Patch
• https://cve.org/CVERecord?id=CVE-2023-53473 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:03628-1 · Vendor Advisory
• https://git.kernel.org/stable/c/c1fae027da61fe8e7eb99f7244297e81bc0f1e43 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:3716-1 · Vendor Advisory