CVE-2023-53820
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-09

Last updated on: 2025-12-09

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: loop: loop_set_status_from_info() check before assignment In loop_set_status_from_info(), lo->lo_offset and lo->lo_sizelimit should be checked before reassignment, because if an overflow error occurs, the original correct value will be changed to the wrong value, and it will not be changed back. More, the original patch did not solve the problem, the value was set and ioctl returned an error, but the subsequent io used the value in the loop driver, which still caused an alarm: loop_handle_cmd do_req_filebacked loff_t pos = ((loff_t) blk_rq_pos(rq) << 9) + lo->lo_offset; lo_rw_aio cmd->iocb.ki_pos = pos
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-09
Last Modified
2025-12-09
Generated
2026-05-07
AI Q&A
2025-12-09
EPSS Evaluated
2026-05-05
NVD
CVE-2023-53820
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability in the Linux kernel's loop driver occurs because the function loop_set_status_from_info() does not properly check lo->lo_offset and lo->lo_sizelimit before reassigning them. If an overflow error happens, the original correct values are overwritten with incorrect ones and are not restored. Although an ioctl call may return an error after setting these values, subsequent I/O operations still use the incorrect values, potentially causing unexpected behavior or alarms in the loop driver.


How can this vulnerability impact me? :

The impact of this vulnerability is that incorrect values for lo_offset and lo_sizelimit may be used during I/O operations in the loop driver, which can lead to unexpected behavior or alarms. This could potentially affect system stability or data integrity when using loop devices, as operations might be performed with invalid offsets or size limits.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart