Go to homepageCyberStrike

Menu

Star on GitHub · 3.2k
Sign inDownload

CVE-2023-53796

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix information leak in f2fs_move_inline_dirents() When converting an inline directory to a regular one, f2fs is leaking…

Published Dec 9, 2025EPSS 0.21%

Overview

CVE-2023-53796 is a known-severity vulnerability. It was published on December 9, 2025.

Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix information leak in f2fs_move_inline_dirents()

When converting an inline directory to a regular one, f2fs is leaking

uninitialized memory to disk because it doesn't initialize the entire

directory block. Fix this by zero-initializing the block.

This bug was introduced by commit 4ec17d688d74 ("f2fs: avoid unneeded

initializing when converting inline dentry"), which didn't consider the

security implications of leaking uninitialized memory to disk.

This was found by running xfstest generic/435 on a KMSAN-enabled kernel.

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References

Refgit.kernel.org/stable/c/00b5587326625d0fddb2a5f5a3d4acd950102aceRefgit.kernel.org/stable/c/117d4f6687b1f74423b5d398ea95c63b262a8e73Refgit.kernel.org/stable/c/2bef8314fcf94ddc27e22d03f237c0fafd00de33Refgit.kernel.org/stable/c/4e3b4b170bd43db1d8a93a6bd0ea434b17cc86f7Refgit.kernel.org/stable/c/9a5571cff4ffcfc24847df9fd545cc5799ac0ee5Refgit.kernel.org/stable/c/a6807ef0f3b3d8508d3b07a2e35de8a91820a014Refgit.kernel.org/stable/c/eebaecef0095bb8f493c03982da75c6e7bae1056Refgit.kernel.org/stable/c/f07a8d61b6ea81bb3cbe0638af40f8824d6147fd

How CyberStrike helps

Frequently asked questions

What is CVE-2023-53796?

CVE-2023-53796 is a known-severity vulnerability. It was published on December 9, 2025.

How severe is CVE-2023-53796?

CVSS score information is not yet available for this vulnerability. Check back as the CVE record is updated by NVD analysts.

How do I fix or remediate CVE-2023-53796?

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

How can CyberStrike help with CVE-2023-53796?

CyberStrike is an open-source, AI-augmented pentesting engine. Rather than flag a version number, it tests whether an issue like CVE-2023-53796 is actually reachable in your own applications and APIs, then verifies each finding before reporting it. That tells you if the weakness is a real, exploitable risk in your environment or a false positive you can safely deprioritize.

Browse by year2026202520242023202220212020201920182017201620152014201320122011201020092008200720062005200420032002200120001999