CVE-2023-53473

CVE-2023-53473

High · published October 1, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: improve error handling from ext4_dirhash()

The ext4_dirhash() will *almost* never fail, especially when the hash

tree feature was first introduced. However, with the addition of

support of encrypted, casefolded file names, that function can most

certainly fail today.

So make sure the callers of ext4_dirhash() properly check for

failures, and reflect the errors back up to their callers.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2025-10-01T16:15Z
Affected products (5)
ProductVersionsFixed in
linux/linux_kernel≥ 5.2, < 5.15.1125.15.112
linux/linux_kernel≥ 5.16, < 6.1.296.1.29
linux/linux_kernel≥ 6.2, < 6.2.166.2.16
linux/linux_kernel≥ 6.3, < 6.3.36.3.3
linux/linux_kernelall versions—
References (5)
EPSS history
Timeline
  • 01 OCT 11:42Z
    ext4: improve error handling from ext4_dirhash()
    cvelistv5