PT-2025-41116 · Linux+1 · Linux Kernel+1

Published 2023-08-21 · Updated 2025-11-28 · CVE-2023-53672

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue where extra debug information is output if an inline backref cannot be found during a lookup operation. This was identified through reports from Syzbot, which triggered warnings within the lookup inline extent backref() function. The issue occurs when attempting to insert a new inline backref, but the backref is not found, indicating a potential inconsistency in the extent tree. The enhancement involves dumping parameters and the extent tree leaf to aid in debugging.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

CWE-200

CWE-253

Related Identifiers

BDU:2026-01409

CVE-2023-53672

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4189-1

SUSE-SU-2025:4301-1

Affected Products

Linux Kernel

Suse

References · 1177

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53672.json · Exploit
• https://git.kernel.org/stable/c/376b41524b71e494514720bd6114325b0a2ed19c · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01409 · Security Note
• https://git.kernel.org/stable/c/6994f806c6d1ae8b59344d3700358547f3b3fe1d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4189-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53672 · Security Note
• https://git.kernel.org/stable/c/e70ba449b04b40584bdabb383d10455397cbf177 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53672 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53672 · Vendor Advisory
• https://git.kernel.org/stable/c/28062cd6eda04035d8f6ded2001292ac8b496149 · Patch
• https://git.kernel.org/stable/c/b7c3cf2f6c42e6688b1c37215a0b1663f982f915 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:21052-1 · Vendor Advisory