CVE-2023-53100: linux kernel before 4.14.310 (exclusive), from 4.15 (inclusive), before 4.19.278 (exclusive), from 4.20 (inclusive)…

Affected technology

linux kernel · before 4.14.310 (exclusive)
linux

linux kernel · from 4.15 (inclusive), before 4.19.278 (exclusive)
linux

linux kernel · from 4.20 (inclusive), before 5.4.237 (exclusive)
linux

linux kernel · from 5.5 (inclusive), before 5.10.175 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.103 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.20 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.2.7 (exclusive)
linux

linux kernel · 6.3 · update rc1
linux

Linux · 67cf5b09a46f72e048501b84996f2f77bc42e947 to before c5aa102b433b1890e1ccaa40c06826c77dda1665, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 39c5df2ca544368b44b59d0f6d80131e90763371, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 74d775083e9f3d9dadf9e3b5f3e0028d1ad0bd5c, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before a9bd94f67b27739bbe8583c52256502bd4cc7e83, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before ca500cf2eceb5a8e93bf71ab97b5f7a18ecabce2, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 35161cec76772f74526f5886ad4082ec48511d5c, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 92eee6a82a9a6f9f83559e17a2b6b935e1a5cd25, 67cf5b09a46f72e048501b84996f2f77bc42e947 to before 2b96b4a5d9443ca4cad58b0040be455803c05a42
Linux

Linux · 3.8
Linux

Component: Not specified by the source
File: fs/ext4/xattr.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.