CVE-2023-53626: linux kernel 5.4.237, 5.10.175, 5.15.103 (+2 more affected versions); +1 more affected products

Affected technology

linux kernel · 5.4.237
linux

linux kernel · 5.10.175
linux

linux kernel · 5.15.103
linux

linux kernel · 6.1.20
linux

linux kernel · 6.2.7
linux

linux kernel · 6.3 · update rc1
linux

linux kernel · 6.3 · update rc2
linux

Linux · 8dac5a63cf79707b547ea3d425fead5f4482198f to before c16cbd8233d6c58fc488545393e49b5d55729990, 0c440f14558bfacd22c6935ae1fd4b2a09e96b5d to before 020166bc6669ca9fb267ebd96bd88c4fb64a5d46, c50fc503ee1b97f12c98e26afc39fdaebebcf04f to before 1c93c42c7bb23057bde8a0a2ab834927ff64d20c, b0bb13612292ca90fa4c2a7e425375649bc50d3e to before e71eb4dca41f0f36823724ced0406bb2dbdd5506, 291cd19d107e197306869cb3237c1bba62d13182 to before 43ce288ab5d7274a4a141d7f5e3ed2ab7b41f8a2, 0813299c586b175d7edb25f56412c54b812d0379 to before 70e42feab2e20618ddd0cbfc4ab4b08628236ecd
Linux

Linux · 5.4.237 to before 5.4.238, 5.10.175 to before 5.10.176, 5.15.103 to before 5.15.104, 6.1.20 to before 6.1.21, 6.2.7 to before 6.2.8
Linux

Component: Not specified by the source
File: fs/ext4/namei.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. NVD’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.