{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.20-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.20-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.20-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  f2fs: fix to avoid potential memory corruption in __update_iostat_latency()  Add iotype sanity check to avoid potential memory corruption. This is to fix the compile error below:  fs/f2fs/iostat.c:231 __update_iostat_latency() error: buffer overflow 'io_lat-\u003epeak_lat[type]' 3 \u003c= 3  vim +228 fs/f2fs/iostat.c    211  static inline void __update_iostat_latency(struct bio_iostat_ctx \t*iostat_ctx,   212\t\t\t\t\tenum iostat_lat_type type)   213  {   214\t\tunsigned long ts_diff;   215\t\tunsigned int page_type = iostat_ctx-\u003etype;   216\t\tstruct f2fs_sb_info *sbi = iostat_ctx-\u003esbi;   217\t\tstruct iostat_lat_info *io_lat = sbi-\u003eiostat_io_lat;   218\t\tunsigned long flags;   219   220\t\tif (!sbi-\u003eiostat_enable)   221\t\t\treturn;   222   223\t\tts_diff = jiffies - iostat_ctx-\u003esubmit_ts;   224\t\tif (page_type \u003e= META_FLUSH)                                  ^^^^^^^^^^    225\t\t\tpage_type = META;   226   227\t\tspin_lock_irqsave(\u0026sbi-\u003eiostat_lat_lock, flags);  @228\t\tio_lat-\u003esum_lat[type][page_type] += ts_diff;                                       ^^^^^^^^^ Mixup between META_FLUSH and NR_PAGE_TYPE leads to memory corruption.",
  "id": "DEBIAN-CVE-2023-53214",
  "modified": "2026-09-15T08:47:49.118486526Z",
  "published": "2025-09-15T15:15:48.027Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2023-53214"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "upstream": [
    "CVE-2023-53214"
  ]
}