UDF Vulnerability in Linux Kernel Affects Data Integrity

CVE-2023-53295

What is CVE-2023-53295?

A vulnerability in the Linux kernel related to the UDF (Universal Disk Format) has been identified. When write operations to inline files fail or are only partially completed, the system erroneously updates the file length as though the entire write succeeded. This issue could lead to data integrity problems, as the reported length does not reflect the actual state of the stored data. The fix ensures that the file length is only updated when a write operation is successfully completed.

References