Vulnerability in Linux

CVE-2023-53285

In the Linux kernel, the following vulnerability has been resolved: ext4: add bounds checking in get_max_inline_xattr_value_size() Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file system is mounted, it's possible for the inode table to get corrupted. Add bounds checking to avoid reading beyond the end of allocated memory if this happens.

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

EPSS exploit prediction

EPSS: 0.002 (4.1th percentile), scored .

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 4th percentile — 4.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS trend (30 days)EPSS over the last 30 days for CVE-2023-53285: held from 0.002 to 0.002.

EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000

Affected products

  • Linux — versions 67cf5b09a46f72e048501b84996f2f77bc42e947, 3.8, 0
  • Linux Kernel — versions 6.4

References

Frequently asked questions

What is CVE-2023-53285?
CVE-2023-53285 is a high-severity vulnerability in Linux. CVSS score: 7.1/10. Published 2025-09-16.
How severe is CVE-2023-53285?
High severity. CVSS v3 base score is 7.1 out of 10.