High 7.8Published Oct 22, 2025

CVE-2023-53695udf: Detect system inodes linked into directory hierarchy

Updated under an hour ago (Oct 26, 2026, 10:10 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: udf: Detect system inodes linked into directory hierarchy When UDF filesystem is corrupted, hidden system inodes can be linked into directory hierarchy which is an avenue for further serious corruption of the filesystem and kernel confusion as noticed by syzbot fuzzed images. Refuse to access system inodes linked into directory hierarchy and vice versa.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	6174c2eb8ecef271159bdcde460ce8af54d8f72f builds before 1dc71eeb198a8daa17d0c995998a53b0b749a158; from 6174c2eb8ecef271159bdcde460ce8af54d8f72f before d747b31e2925a2f384e7dd1901a2e5bc5f984ed8; from 6174c2eb8ecef271159bdcde460ce8af54d8f72f before a44ec34b90440ada190924f5908b97026504fdcd; 6174c2eb8ecef271159bdcde460ce8af54d8f72f builds before 37e74003d81e79457535cbbdfa1603431c03fac0; 6174c2eb8ecef271159bdcde460ce8af54d8f72f builds before 1f328751b65c49c13a312d67a3bf27766b85baf7; 6174c2eb8ecef271159bdcde460ce8af54d8f72f builds before 9e3b5ef7d02eaa6553e79b4af9bd99227280f245; 6174c2eb8ecef271159bdcde460ce8af54d8f72f builds before 85a37983ec69cc9fcd188bc37c4de15ee326355a; 801c7a20d255e300ab51a6fcb1d0e218d136b16f; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/1dc71eeb198a8daa17d0c995998a53b0b749a158
https://git.kernel.org/stable/c/d747b31e2925a2f384e7dd1901a2e5bc5f984ed8
https://git.kernel.org/stable/c/a44ec34b90440ada190924f5908b97026504fdcd
https://git.kernel.org/stable/c/37e74003d81e79457535cbbdfa1603431c03fac0
https://git.kernel.org/stable/c/1f328751b65c49c13a312d67a3bf27766b85baf7
https://git.kernel.org/stable/c/9e3b5ef7d02eaa6553e79b4af9bd99227280f245
https://git.kernel.org/stable/c/85a37983ec69cc9fcd188bc37c4de15ee326355a

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.