CVE-2023-53165

Katalog CVE

CVSS 5.5 · Medium EPSS 0,16%

Kerentanan Use of Uninitialized Resource pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical impact is that the name may be prepended a "unification hash" when it is not actually needed but still it is good to fix this.

Rincian

Terbit di NVD

15 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-908: Use of Uninitialized Resource

EPSS (30 hari)

0,16% peluang dieksploitasi; lebih tinggi dari 4,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/008ae78d1e12efa904dc819b1ec83e2bca6b2c56 patch
• https://git.kernel.org/stable/c/028f6055c912588e6f72722d89c30b401bbcf013 patch
• https://git.kernel.org/stable/c/3f1368af47acf4d0b2a5fb0d2c0d6919d2234b6d patch
• https://git.kernel.org/stable/c/4503f6fc95d6dee85fb2c54785848799e192c51c patch
• https://git.kernel.org/stable/c/4d50988da0db167aed6f38685145cb5cd526c4f8 patch
• https://git.kernel.org/stable/c/985f9666698960dfc87a106d6314203fa90fda75 patch
• https://git.kernel.org/stable/c/a6824149809395dfbb5bc36bc7057cc3cb84e56d patch
• https://git.kernel.org/stable/c/b37f998d357102e8eb0f8eeb33f03fff22e49cbf patch