{
  "cveId": "CVE-2023-53214",
  "url": "https://patchblox.com/security/cve/CVE-2023-53214",
  "summary": "CVE-2023-53214 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53214, released September 15, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  f2fs: fix to avoid potential memory corruption i...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  f2fs: fix to avoid potential memory corruption in __update_iostat_latency()  Add iotype sanity check to avoid potential memory corruption. This is to fix the compile error below:  fs/f2fs/iostat.c:231 __update_iostat_latency() error: buffer overflow \u0027io_lat-\u003Epeak_lat[type]\u0027 3 \u003C= 3  vim \u002B228 fs/f2fs/iostat.c    211  static inline void __update_iostat_latency(struct bio_iostat_ctx \t*iostat_ctx,   212\t\t\t\t\tenum iostat_lat_type type)   213  {   214\t\tunsigned long ts_diff;   215\t\tunsigned int page_type = iostat_ctx-\u003Etype;   216\t\tstruct f2fs_sb_info *sbi = iostat_ctx-\u003Esbi;   217\t\tstruct iostat_lat_info *io_lat = sbi-\u003Eiostat_io_lat;   218\t\tunsigned long flags;   219   220\t\tif (!sbi-\u003Eiostat_enable)   221\t\t\treturn;   222   223\t\tts_diff = jiffies - iostat_ctx-\u003Esubmit_ts;   224\t\tif (page_type \u003E= META_FLUSH)                                  ^^^^^^^^^^    225\t\t\tpage_type = META;   226   227\t\tspin_lock_irqsave(\u0026sbi-\u003Eiostat_lat_lock, flags);  @228\t\tio_lat-\u003Esum_lat[type][page_type] \u002B= ts_diff;                                       ^^^^^^^^^ Mixup between META_FLUSH and NR_PAGE_TYPE leads to memory corruption.",
  "published": "2025-09-15T15:15:48Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00176,
  "epssPercentile": 0.07192,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53214",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53214",
      "released": "2025-09-15T15:15:48Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53214",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53214",
      "released": "2025-09-15T15:15:48Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.1.20-1",
      "fix": "DEBIAN-CVE-2023-53214",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53214",
      "released": "2025-09-15T15:15:48Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}