CVE-2023-53317

A vulnerability was found in the ext4 filesystem driver in the Linux kernel. This flaw occurs when the system processes a maliciously crafted or corrupted ext4 filesystem image, as the driver fails to properly validate its structural data. A local user with the ability to mount such an image could use this flaw to cause a system crash, resulting in a denial of service. This vulnerability could also lead to silent corruption of data on the affected filesystem.

This vulnerability will only result in a Denial of Service when the panic_on_warn flag is enabled, which is not the default configuration for Red hat Linux installations.

Red Hat Product Security team has rated this vulnerability as having a Moderate severity due to the fact an attacker needs to have privileges to mount the filesystem, additionally the complexity of corrupting the block bitmap can be considered high and the attacker has no full control on how the data will be corrupted in a event of a successful attack.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

There's no available mitigation for this issue.