CVE-2023-53683: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

Affected products

• Linux Linux Kernel: from 4.14.303, before 4.14.316 (fixed in 4.14.316); from 4.19.270, before 4.19.284 (fixed in 4.19.284); from 5.4.229, before 5.4.244 (fixed in 5.4.244); from 5.10.163, before 5.10.181 (fixed in 5.10.181); from 5.15.87, before 5.15.113 (fixed in 5.15.113); from 5.16, before 6.1.30 (fixed in 6.1.30); …

Published 2025-10-07. Last modified 2026-08-04.