CVE-2023-53695

A flaw was discovered in the UDF filesystem implementation in the Linux kernel. In certain corruption scenarios, system inodes (normally hidden and internal to the filesystem) may be linked into the visible directory hierarchy. This can lead to confusion within the kernel and potential further filesystem corruption or undefined behaviour when those inodes are accessed.

This issue is triggered by a specially crafted disk image containing on-disk metadata inconsistencies. Exploitation requires that an attacker convince a user to download and use a malicious image from an untrusted source, a scenario with limited practical impact. Red Hat rates this as Low severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.