Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.3

CVE-2023-53683: Linux kernel HFS+ driver may trigger kernel warning

CVE-2023-53683 · published 1 year ago
Summary

The Linux kernel's HFS+ file system code could hit an internal warning when it reads a specially crafted disk image with incorrect length values. This warning can lead to a system panic, causing the computer to freeze or reboot. Updating the kernel to the latest version resolves the issue.

What to do
  • Update linux kernel to version 6.3.4.
  • Update canonical linux-aws-5.4 to version 5.4.0-1109.118~18.04.1.
  • Update canonical linux-azure-5.4 to version 5.4.0-1115.122~18.04.1.
  • Update canonical linux-gcp-5.4 to version 5.4.0-1112.121~18.04.1.
  • Update canonical linux-hwe-5.4 to version 5.4.0-162.179~18.04.1.
  • Update canonical linux-ibm-5.4 to version 5.4.0-1056.61~18.04.1.
  • Update canonical linux-oracle-5.4 to version 5.4.0-1108.117~18.04.1.
  • Update canonical linux-raspi-5.4 to version 5.4.0-1093.104~18.04.1.
  • Update canonical linux to version 5.4.0-162.179.
  • Update canonical linux-aws to version 5.4.0-1109.118.
  • Update canonical linux-aws-5.15 to version 5.15.0-1044.49~20.04.1.
  • Update canonical linux-azure to version 5.4.0-1115.122.
  • Update canonical linux-azure-5.15 to version 5.15.0-1046.53~20.04.1.
  • Update canonical linux-bluefield to version 5.4.0-1070.76.
  • Update canonical linux-gcp to version 5.4.0-1112.121.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1041.49~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-83.92~20.04.1.
  • Update canonical linux-ibm to version 5.4.0-1056.61.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1037.40~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1040.46~20.04.1.
  • Update canonical linux-iot to version 5.4.0-1021.22.
  • Update canonical linux-kvm to version 5.4.0-1098.104.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-83.92~20.04.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1017.17~20.04.1.
  • Update canonical linux-oracle to version 5.4.0-1108.117.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1042.48~20.04.1.
  • Update canonical linux-raspi to version 5.4.0-1093.104.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1040.44~20.04.3.
  • Update canonical linux-xilinx-zynqmp to version 5.4.0-1029.33.
  • Update canonical linux-aws-fips to version 5.4.0-1109.118+fips1.
  • Update canonical linux-azure-fips to version 5.4.0-1115.122+fips1.
  • Update canonical linux-fips to version 5.4.0-1084.93.
  • Update canonical linux-gcp-fips to version 5.4.0-1112.121+fips1.
  • Update canonical linux to version 5.15.0-83.92.
  • Update canonical linux-aws to version 5.15.0-1044.49.
  • Update canonical linux-azure to version 5.15.0-1046.53.
  • Update canonical linux-gcp to version 5.15.0-1041.49.
  • Update canonical linux-gke to version 5.15.0-1041.46.
  • Update canonical linux-gkeop to version 5.15.0-1027.32.
  • Update canonical linux-ibm to version 5.15.0-1037.40.
  • Update canonical linux-intel-iotg to version 5.15.0-1039.45.
  • Update canonical linux-kvm to version 5.15.0-1041.46.
  • Update canonical linux-lowlatency to version 5.15.0-83.92.
  • Update canonical linux-nvidia to version 5.15.0-1032.32.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1017.17.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1004.4.
  • Update canonical linux-oracle to version 5.15.0-1042.48.
  • Update canonical linux-raspi to version 5.15.0-1037.40.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
  • Update canonical linux-bluefield to version 5.15.0-1023.25.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1038.40.
  • Update canonical linux-realtime to version 5.15.0-1045.50.
  • Update debian linux to version 6.1.37-1.
  • Update debian linux to version 6.3.7-1.
  • Update canonical linux-azure-fde to version 5.15.0-1046.53.1.
  • Update linux linux to version 61af77acd039ffd221bf7adf0dc95d0a4d377505 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 4.14.303, < 4.14.316
>= 4.19.270, < 4.19.284
>= 5.4.229, < 5.4.244
>= 5.10.163, < 5.10.181
>= 5.15.87, < 5.15.113
>= 5.16, < 6.1.30
>= 6.2, < 6.3.4
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
– linux linux < 61af77acd039ffd221bf7adf0dc95d0a4d377505
5.16
Linux linux kernel >= 5.16.0, < 6.3.4
Fix: upgrade to 6.3.4
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 < 5.4.0-1109.118~18.04.1
Fix: upgrade to 5.4.0-1109.118~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 < 5.4.0-1115.122~18.04.1
Fix: upgrade to 5.4.0-1115.122~18.04.1
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 < 5.4.0-1112.121~18.04.1
Fix: upgrade to 5.4.0-1112.121~18.04.1
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 < 5.4.0-162.179~18.04.1
Fix: upgrade to 5.4.0-162.179~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 < 5.4.0-1056.61~18.04.1
Fix: upgrade to 5.4.0-1056.61~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 < 5.4.0-1108.117~18.04.1
Fix: upgrade to 5.4.0-1108.117~18.04.1
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 < 5.4.0-1093.104~18.04.1
Fix: upgrade to 5.4.0-1093.104~18.04.1
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:20.04:LTS canonical linux < 5.4.0-162.179
Fix: upgrade to 5.4.0-162.179
Ubuntu:20.04:LTS canonical linux-aws < 5.4.0-1109.118
Fix: upgrade to 5.4.0-1109.118
Ubuntu:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1044.49~20.04.1
Fix: upgrade to 5.15.0-1044.49~20.04.1
Ubuntu:20.04:LTS canonical linux-azure < 5.4.0-1115.122
Fix: upgrade to 5.4.0-1115.122
Ubuntu:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1046.53~20.04.1
Fix: upgrade to 5.15.0-1046.53~20.04.1
Ubuntu:20.04:LTS canonical linux-bluefield < 5.4.0-1070.76
Fix: upgrade to 5.4.0-1070.76
Ubuntu:20.04:LTS canonical linux-gcp < 5.4.0-1112.121
Fix: upgrade to 5.4.0-1112.121
Ubuntu:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1041.49~20.04.1
Fix: upgrade to 5.15.0-1041.49~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-83.92~20.04.1
Fix: upgrade to 5.15.0-83.92~20.04.1
Ubuntu:20.04:LTS canonical linux-ibm < 5.4.0-1056.61
Fix: upgrade to 5.4.0-1056.61
Ubuntu:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1037.40~20.04.1
Fix: upgrade to 5.15.0-1037.40~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1040.46~20.04.1
Fix: upgrade to 5.15.0-1040.46~20.04.1
Ubuntu:20.04:LTS canonical linux-iot < 5.4.0-1021.22
Fix: upgrade to 5.4.0-1021.22
Ubuntu:20.04:LTS canonical linux-kvm < 5.4.0-1098.104
Fix: upgrade to 5.4.0-1098.104
Showing 50 of 152. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-83.92~20.04.1
Fix: upgrade to 5.15.0-83.92~20.04.1
Ubuntu:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1017.17~20.04.1
Fix: upgrade to 5.15.0-1017.17~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle < 5.4.0-1108.117
Fix: upgrade to 5.4.0-1108.117
Ubuntu:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1042.48~20.04.1
Fix: upgrade to 5.15.0-1042.48~20.04.1
Ubuntu:20.04:LTS canonical linux-raspi < 5.4.0-1093.104
Fix: upgrade to 5.4.0-1093.104
Ubuntu:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1040.44~20.04.3
Fix: upgrade to 5.15.0-1040.44~20.04.3
Ubuntu:20.04:LTS canonical linux-xilinx-zynqmp < 5.4.0-1029.33
Fix: upgrade to 5.4.0-1029.33
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips < 5.4.0-1109.118+fips1
Fix: upgrade to 5.4.0-1109.118+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips < 5.4.0-1115.122+fips1
Fix: upgrade to 5.4.0-1115.122+fips1
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips < 5.4.0-1084.93
Fix: upgrade to 5.4.0-1084.93
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips < 5.4.0-1112.121+fips1
Fix: upgrade to 5.4.0-1112.121+fips1
Ubuntu:22.04:LTS canonical linux < 5.15.0-83.92
Fix: upgrade to 5.15.0-83.92
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1044.49
Fix: upgrade to 5.15.0-1044.49
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1046.53
Fix: upgrade to 5.15.0-1046.53
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1041.49
Fix: upgrade to 5.15.0-1041.49
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1041.46
Fix: upgrade to 5.15.0-1041.46
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1027.32
Fix: upgrade to 5.15.0-1027.32
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1037.40
Fix: upgrade to 5.15.0-1037.40
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1039.45
Fix: upgrade to 5.15.0-1039.45
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1041.46
Fix: upgrade to 5.15.0-1041.46
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-83.92
Fix: upgrade to 5.15.0-83.92
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1032.32
Fix: upgrade to 5.15.0-1032.32
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1017.17
Fix: upgrade to 5.15.0-1017.17
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1004.4
Fix: upgrade to 5.15.0-1004.4
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1042.48
Fix: upgrade to 5.15.0-1042.48
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1037.40
Fix: upgrade to 5.15.0-1037.40
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1025.29
Fix: upgrade to 5.15.0-1025.29
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1023.25
Fix: upgrade to 5.15.0-1023.25
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1038.40
Fix: upgrade to 5.15.0-1038.40
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1045.50
Fix: upgrade to 5.15.0-1045.50
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Debian:12 debian linux < 6.1.37-1
Fix: upgrade to 6.1.37-1
Debian:13 debian linux < 6.3.7-1
Fix: upgrade to 6.3.7-1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1046.53.1
Fix: upgrade to 5.15.0-1046.53.1
Original advisory text
fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()
In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
8.3 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-617Reachable Assertion
Timeline
Published7 Oct 2025
Updated3 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta