CVE-2023-53301Linux vulnerability

5 documents5 sources
Severity
7.1HIGHNVD
EPSS
0.0%
top 97.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 16

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We should return when io->bio is null before doing anything. Otherwise, panic. BUG: kernel NULL pointer dereference, address: 0000000000000010 RIP: 0010:__submit_merged_write_cond+0x164/0x240 [f2fs] Call Trace: f2fs_submit_merged_write+0x1d/0x30 [f2fs] commit_checkpoint+0x110/0x1e0 [f2fs] f2fs_write_checkpoint+0x9f7/0xf00 [f2fs] ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] __che

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages4 packages

NVDlinux/linux_kernel5.186.1.16+1
Debianlinux/linux_kernel< 6.1.20-1+2
CVEListV5linux/linux64bf0eef0171912f7c2f3ea30ee6ad7a2ad0a51183dbb9a1bd5ef2eea73275906fc50b2fdda39cd5+3
debiandebian/linux< linux 6.1.20-1 (bookworm)

Patches

🔴Vulnerability Details

2
OSV
CVE-2023-53301: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We should return when io->bio is null b2025-09-16
GHSA
GHSA-hg25-38jx-wr4p: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We should return when io->bio is null2025-09-16

📋Vendor Advisories

2
Red Hat
kernel: f2fs: fix kernel crash due to null io->bio2025-09-16
Debian
CVE-2023-53301: linux - In the Linux kernel, the following vulnerability has been resolved: f2fs: fix k...2023
CVE-2023-53301 — Linux vulnerability | cvebase