What’s Vulnerable › Vulnerabilities

CVE-2023-2513

• Severity: medium (CVSS 6.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-08 · updated 2026-06-17
• Weakness: CWE-416

Description

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.

Affected products

• Linux kernel: through 5.19
• Red Hat Enterprise Linux: 6.0, 7.0, 8.0, 9.0

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2193097
• https://github.com/torvalds/linux/commit/67d7d8ad99be
• https://lore.kernel.org/all/20220616021358.2504451-1-libaokun1%40huawei.com/
• https://bugzilla.redhat.com/show_bug.cgi?id=2193097
• https://github.com/torvalds/linux/commit/67d7d8ad99be
• https://lore.kernel.org/all/20220616021358.2504451-1-libaokun1%40huawei.com/

Get alerted when CVE-2023-2513 or the next vulnerability affects your stack