Vulnerability in Linux
CVE-2023-53473
In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4_dirhash() The ext4_dirhash() will *almost* never fail, especially when the hash tree feature was first introduced. However, with the addition of support of encrypted, casefolded file names, that function can most certainly fail today. So make sure the callers of ext4_dirhash() properly check for failures, and reflect the errors back up to their callers.
EPSS: 0.002 (5.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions b886ee3e778ec2ad43e276fd378ab492cf6819b7, 5.2, 0
- Linux Linux_kernel — versions 6.4
References
Frequently asked questions
- What is CVE-2023-53473?
- CVE-2023-53473 is a high-severity vulnerability in Linux. CVSS score: 7.8/10. Published 2025-10-01.
- How severe is CVE-2023-53473?
- High severity. CVSS v3 base score is 7.8 out of 10.