PT-2025-43133 · Linux+1 · Linux Kernel+1

Published 2023-03-27 · Updated 2026-03-14 · CVE-2023-53732

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ntfs3 file system implementation. Specifically, a NULL dereference can occur in the ni write inode function during inode creation. This happens when memory allocation fails within the mi init function (called by mi format new), resulting in the mi->mrec member being set to NULL. Subsequently, attempting to dereference this NULL pointer in the error path of inode creation leads to the issue. A NULL check has been added to prevent this dereference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-03637

CVE-2023-53732

Affected Products

Linux Kernel

Ntfs3

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53732.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-53732 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53732 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-53732 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53732 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53732 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53732 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-03637 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53732 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53732 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53732 · Vendor Advisory
• https://git.kernel.org/stable/c/b1135fbaf8ebef93df326761ac70ebcc3c2e3d63 · Note
• https://git.kernel.org/stable/c/b3152afc0eb864f7c6ecad134a15b577ef7aec77 · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.81 · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-53732 · Note