PT-2025-53061 · Linux+1 · Linux Kernel+1

Published 2023-03-27 · Updated 2025-12-27 · CVE-2023-54063

Positive Technologies (AI Summary)

CVSS v2.0

1.4

Low

Base vector

AV:A/AC:H/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ntfs3 file system, specifically in the indx insert into buffer function. A reported out-of-bounds (OOB) read bug occurs when the INDEX BUFFER member of the indx node structure is incorrect, leading to a potential OOB read during a memmove operation within the indx insert into buffer function. This issue is triggered when the value of le32 used is greater than the value of le32 total in the INDEX HDR structure. The hdr find e() function is involved in this process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2026-01339

CVE-2023-54063

Affected Products

Linux Kernel

Ntfs3

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54063.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54063 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54063 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54063 · Security Note
• https://ubuntu.com/security/CVE-2023-54063 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54063 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01339 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54063 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54063 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54063 · Vendor Advisory
• https://git.kernel.org/stable/c/cd7e1d67924081717c5c96ead758a1a77867689a · Note
• https://git.kernel.org/stable/c/b8c44949044e5f7f864525fdffe8e95135ce9ce5 · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.15 · Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54063 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note