CVE-2023-52497

🗓️ 29 Feb 2024 15:52:13Reported by LinuxType

In the Linux kernel, EROFS vulnerability CVE-2023-52497 resolved with fix for LZ4 inplace decompressio

Reporter	Title	Published	Views	Family All 245
AstraLinux	Astra Linux - уязвимость в linux-5.10, linux-5.15, linux-6.1, linux	20 May 202605:53	–	astralinux
Circl	CVE-2023-52497	1 Mar 202415:27	–	circl
CNNVD	Linux kernel 安全漏洞	29 Feb 202400:00	–	cnnvd
CNVD	Linux kernel buffer overflow vulnerability (CNVD-2025-02550)	13 Jan 202500:00	–	cnvd
Cvelist	CVE-2023-52497 erofs: fix lz4 inplace decompression	29 Feb 202415:52	–	cvelist
Debian	[SECURITY] [DLA 3842-1] linux-5.10 security update	25 Jun 202419:41	–	debian
Debian	[SECURITY] [DSA 5681-1] linux security update	6 May 202418:31	–	debian
Debian CVE	CVE-2023-52497	29 Feb 202415:52	–	debiancve
Tenable Nessus	Debian dla-3842 : linux-config-5.10 - security update	27 Jun 202400:00	–	nessus
Tenable Nessus	Debian dsa-5681 : affs-modules-5.10.0-29-4kc-malta-di - security update	6 May 202400:00	–	nessus

NVD

Vulners

CNA

Node

linux linux_kernelRange5.3–5.4.285

linux linux_kernelRange5.5–5.10.211

linux linux_kernelRange5.11–5.15.150

linux linux_kernelRange5.16–6.1.76

linux linux_kernelRange6.2–6.6.15

linux linux_kernelRange6.7–6.7.3

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/erofs/decompressor.c"
    ],
    "versions": [
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "9ff2d260b25df6fe1341a79113d88fecf6bd553e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "a0180e940cf1aefa7d516e20b259ad34f7a8b379",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "77cbc04a1a8610e303a0e0d74f2676667876a184",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "33bf23c9940dbd3a22aad7f0cda4c84ed5701847",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "f36d200a80a3ca025532ed60dd1ac21b620e14ae",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "bffc4cc334c5bb31ded54bc3cfd651735a3cb79e",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "0ffd71bcc3a03ebb3551661a36052488369c4de9",
        "lessThan": "3c12466b6b7bf1e56f9b32c366a3d83d87afb4de",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/erofs/decompressor.c"
    ],
    "versions": [
      {
        "version": "5.3",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "5.3",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.4.285",
        "lessThanOrEqual": "5.4.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.211",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.150",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.76",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.15",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.7.3",
        "lessThanOrEqual": "6.7.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.8",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/f36d200a80a3ca025532ed60dd1ac21b620e14ae
git	www.git.kernel.org/stable/c/a0180e940cf1aefa7d516e20b259ad34f7a8b379
git	www.git.kernel.org/stable/c/9ff2d260b25df6fe1341a79113d88fecf6bd553e
git	www.git.kernel.org/stable/c/77cbc04a1a8610e303a0e0d74f2676667876a184
git	www.git.kernel.org/stable/c/33bf23c9940dbd3a22aad7f0cda4c84ed5701847
git	www.git.kernel.org/stable/c/bffc4cc334c5bb31ded54bc3cfd651735a3cb79e
git	www.git.kernel.org/stable/c/3c12466b6b7bf1e56f9b32c366a3d83d87afb4de
lists	www.lists.debian.org/debian-lts-announce/2024/06/msg00017.html

11 May 2026 19:28Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.1

EPSS0.0002

SSVC

CWE-787