PT-2025-40747 · Linux+1 · Linux Kernel+1

Published 2023-02-02 · Updated 2026-04-20 · CVE-2023-53584

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5-00184-g0bca5994cacc-dirty #308

Description The Linux kernel contained a flaw in the ubifs subsystem related to page management. Specifically, a race condition could occur during page truncation and file advice operations, leading to an assertion failure within the ubifs releasepage() function. This could result in the file system switching to read-only mode. The issue arises from a scenario where a page could be in a private but not dirty state, triggering a false assertion.

Recommendations Update to Linux kernel version 5.16.0-rc5-00184-g0bca5994cacc-dirty #308 or a later version to resolve this issue.

Exploit

Fix

Buffer Overflow

Assertion Failure

Weakness Enumeration

CWE-120

CWE-617

Related Identifiers

BDU:2026-04430

CVE-2023-53584

Affected Products

Debian

Linux Kernel

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53584.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53584 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53584 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53584 · Vendor Advisory
• https://git.kernel.org/stable/c/7750be5d3e18500b454714677463b500a0b8b0d8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2023-53584 · Vendor Advisory
• https://git.kernel.org/stable/c/bd188ff1c8a1935c93a1e3cacf3be62667fdf762 · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53584 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53584 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53584 · Security Note
• https://ubuntu.com/security/CVE-2023-53584 · Vendor Advisory
• https://git.kernel.org/stable/c/66f4742e93523ab2f062d9d9828b3e590bc61536 · Patch
• https://bdu.fstec.ru/vul/2026-04430 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-53584 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53584 · Vendor Advisory