PT-2025-52945 · Linux+1 · Linux Kernel+1

Published 2025-12-24 · Updated 2025-12-27 · CVE-2023-53988

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ntfs3 file system related to out-of-bounds read access in the hdr delete de() function. Specifically, a flaw exists where the kernel does not validate the index header before using metadata within the INDEX HDR structure. This can lead to out-of-bounds access when processing corrupted or maliciously crafted file system images, potentially causing a kernel panic. The issue was identified through a bug report from syzbot, which detected a slab-out-of-bounds read during testing. The memmove function in mm/kasan/shadow.c and functions indx delete entry, ni remove name, ntfs unlink inode, and ntfs rename are involved in the call trace.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53988

Affected Products

Linux Kernel

Ntfs3

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53988.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53988 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53988 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53988 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-53988 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53988 · Security Note
• https://osv.dev/vulnerability/CVE-2023-53988 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-53988 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53988 · Security Note
• https://git.kernel.org/stable/c/4a034ece7e2877673d9085d6e7ed45e6ee40b761 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/114204d25e1dffdd3a0c1cfbba219afd344f4b4f · Note
• https://git.kernel.org/stable/c/9163a5b4ed290da4a7d23fa92533e0e81fd0166e · Note
• https://git.kernel.org/stable/c/ab84eee4c7ab929996602eda7832854c35a6dda2 · Note
• https://twitter.com/CVEnew/status/2004868116376100911 · Twitter Post