CVE-2023-53165

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

udf: Fix uninitialized array access for some pathnames

For filenames that begin with . and are between 2 and 5 characters long, UDF charset conversion code would read uninitialized memory in the output buffer. The only practical impact is that the name may be prepended a "unification hash" when it is not actually needed but still it is good to fix this.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-908

Affected software

VendorProductVersions
LinuxLinux>= 484a10f49387e4386bf2708532e75bf78ffea2cb, < 008ae78d1e12efa904dc819b1ec83e2bca6b2c56; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < b37f998d357102e8eb0f8eeb33f03fff22e49cbf; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < 3f1368af47acf4d0b2a5fb0d2c0d6919d2234b6d; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < 4503f6fc95d6dee85fb2c54785848799e192c51c; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < 985f9666698960dfc87a106d6314203fa90fda75; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < a6824149809395dfbb5bc36bc7057cc3cb84e56d; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < 4d50988da0db167aed6f38685145cb5cd526c4f8; >= 484a10f49387e4386bf2708532e75bf78ffea2cb, < 028f6055c912588e6f72722d89c30b401bbcf013
LinuxLinux4.6

References

Timeline

Published
Sep 15, 2025
Last modified
Nov 5, 2026
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-531664.7In the Linux kernel, the following vulnerability has been resolved: power: supply: bq25890: Fix external_power_changed race bq25890_chargeCVE-2023-531675.5In the Linux kernel, the following vulnerability has been resolved: tracing: Fix null pointer dereference in tracing_err_log_open() Fix anCVE-2023-531685.5In the Linux kernel, the following vulnerability has been resolved: usb: ucsi_acpi: Increase the command completion timeout Commit 130a96dCVE-2023-531695.5In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Clear staged_config[] before and after it is used As a teCVE-2023-53175.4Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18.CVE-2023-531705.5In the Linux kernel, the following vulnerability has been resolved: net: dsa: Removed unneeded of_node_put in felix_parse_ports_node RemovCVE-2023-531715.5In the Linux kernel, the following vulnerability has been resolved: vfio/type1: prevent underflow of locked_vm via exec() When a vfio contCVE-2023-531725.5In the Linux kernel, the following vulnerability has been resolved: fsverity: reject FS_IOC_ENABLE_VERITY on mode 3 fds Commit 56124d6c87fCVE-2023-531735.5In the Linux kernel, the following vulnerability has been resolved: tty: pcn_uart: fix memory leak with using debugfs_lookup() When callinCVE-2023-531745.5In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix possible memory leak if device_add() fails If device_aCVE-2023-531755.5In the Linux kernel, the following vulnerability has been resolved: PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation WhCVE-2023-531765.5In the Linux kernel, the following vulnerability has been resolved: serial: 8250: Reinit port->pm on port specific driver unbind When we u
CVE-2023-53165: Medium severity, CVSS 5.5 | Vulnix