Strix
26.1K

CVE-2023-53838

HIGHCVSS 7.8/10EPSS 0.21%

Last modified

CVE-2023-53838 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime.

Metrics

CVSS 3.1
7.8/10

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.21%

11.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 3db1de0e582c358dd013f3703cd55b5fe4076436, < 102b82708c1523b36d421cb8687746906069bc17; >= 3db1de0e582c358dd013f3703cd55b5fe4076436, < b7724360714642099cec907f54f42e55f5325453; >= 3db1de0e582c358dd013f3703cd55b5fe4076436, < a46bebd502fe1a3bd1d22f64cedd93e7e7702693; 6db52f1944417c2601182a591a704e2f119c5215; >= 5.18.18, < 5.19
LinuxLinux5.19

References

Timeline

Published
Last Modified
Status
Deferred

Frequently Asked Questions

What is CVE-2023-53838?
In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime.
How severe is CVE-2023-53838?
CVE-2023-53838 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2023-53838?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2023

View all 2023CVEs →

Are you affected by CVE-2023-53838?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST