PT-2025-40213 · Linux+1 · Linux Kernel+1

Published 2022-12-16 · Updated 2025-10-24 · CVE-2023-53506

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where merging very long extents could lead to corruption of extents within a file. The problem stemmed from unnecessarily complex logic when attempting to maximize the length of the first extent during merging, and a bug in that logic was identified through syzbot testing. The resolution involves avoiding the merging of extents that are excessively long together.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

BDU:2025-12857

CVE-2023-53506

OESA-2025-2533

SUSE-SU-2025:03614-1

SUSE-SU-2025:03615-1

SUSE-SU-2025:03628-1

SUSE-SU-2025:3716-1

SUSE-SU-2025:3761-1

Affected Products

Linux Kernel

Suse

References · 1015

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53506.json · Exploit
• https://git.kernel.org/stable/c/7a965da79f2d22601f329cbfce588386b0847544 · Patch
• https://git.kernel.org/stable/c/965982feb333aefa9256c0fe188b5f1b958aef63 · Patch
• https://git.kernel.org/stable/c/9a8d602f0723586e668bae7e65c832ceb9bcc8bc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38449 · Security Note
• https://git.kernel.org/stable/c/adac9ac6d2e04ea0782b91a00ba10706002f3ec4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53322 · Security Note
• https://cve.org/CVERecord?id=CVE-2023-53506 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2533 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-50430 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50449 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53380 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53313 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-50497 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-53506 · Security Note