CVE-2023-53450
published 2025-10-01CVE-2023-53450: In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the…
PriorityP419medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
EPSS
0.15%
4.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
If a malicious fuzzer overwrites the ext4 superblock while it is
mounted such that the s_first_data_block is set to a very large
number, the calculation of the block group can underflow, and trigger
a BUG_ON check. Change this to be an ext4_warning so that we don't
crash the kernel.
Affected
24 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b | d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < ef16d8a1798db1a1604ac44ca1bd73ec6bebf483 | ef16d8a1798db1a1604ac44ca1bd73ec6bebf483 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 185062a21976fbc38f2efd296951b02c4500cf65 | 185062a21976fbc38f2efd296951b02c4500cf65 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < b0fc279de4bf17e1710bb7e83906538ff8f11111 | b0fc279de4bf17e1710bb7e83906538ff8f11111 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 978e5e9111af18741449b81fefd531a622dd969a | 978e5e9111af18741449b81fefd531a622dd969a |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < d87a4e4094c9879fc8acdff8ce59fdffa979c8e0 | d87a4e4094c9879fc8acdff8ce59fdffa979c8e0 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < bf2a16eb4e6d06124bd8436d4546f61539a65f29 | bf2a16eb4e6d06124bd8436d4546f61539a65f29 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 53c14e7cc2257191ba15425c15638fc4f8abb92b | 53c14e7cc2257191ba15425c15638fc4f8abb92b |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 463808f237cf73e98a1a45ff7460c2406a150a0b | 463808f237cf73e98a1a45ff7460c2406a150a0b |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 2.6.25 < 4.14.315 | 4.14.315 |
| linux | linux_kernel | >= 4.15 < 4.19.283 | 4.19.283 |
| linux | linux_kernel | >= 4.20 < 5.4.243 | 5.4.243 |
| linux | linux_kernel | >= 5.11 < 5.15.112 | 5.15.112 |
| linux | linux_kernel | >= 5.16 < 6.1.29 | 6.1.29 |
| linux | linux_kernel | >= 5.5 < 5.10.180 | 5.10.180 |
| linux | linux_kernel | >= 6.2 < 6.2.16 | 6.2.16 |
| linux | linux_kernel | >= 6.3 < 6.3.3 | 6.3.3 |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv5.5MEDIUM
vendor_debian5.5MEDIUM
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ext4: remove a BUG_ON in ext4_mb_release_group_pa()
vendor_redhat·2025-10-01·CVSS 5.5
CVE-2023-53450 [MEDIUM] CWE-617 kernel: ext4: remove a BUG_ON in ext4_mb_release_group_pa()
kernel: ext4: remove a BUG_ON in ext4_mb_release_group_pa()
In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
If a malicious fuzzer overwrites the ext4 superblock while it is
mounted such that the s_first_data_block is set to a very large
number, the calculation of the block group can underflow, and trigger
a BUG_ON check. Change this to be an ext4_warning so that we don't
crash the kernel.
Statement: The patch replaces a BUG_ON() in ext4_mb_release_group_pa() with a warning to prevent a kernel panic when the ext4 superblock is corrupted (e.g., s_first_data_block set to an invalid value).
Impact is limited to availability: a malicious image or in-memory corruption can crash the kernel via a reachable assertion.
For the
Debian
CVE-2023-53450: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: remov...
vendor_debian·2023·CVSS 5.5
CVE-2023-53450 [MEDIUM] CVE-2023-53450: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: remov...
In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
OSV
CVE-2023-53450: In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrit
osv·2025-10-01·CVSS 5.5
CVE-2023-53450 [MEDIUM] CVE-2023-53450: In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrit
In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.
GHSA
GHSA-x72c-72g3-7ffp: In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
If a malicious fuzzer overwr
ghsa_unreviewed·2025-10-01
CVE-2023-53450 [MEDIUM] CWE-617 GHSA-x72c-72g3-7ffp: In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
If a malicious fuzzer overwr
In the Linux kernel, the following vulnerability has been resolved:
ext4: remove a BUG_ON in ext4_mb_release_group_pa()
If a malicious fuzzer overwrites the ext4 superblock while it is
mounted such that the s_first_data_block is set to a very large
number, the calculation of the block group can underflow, and trigger
a BUG_ON check. Change this to be an ext4_warning so that we don't
crash the kernel.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/185062a21976fbc38f2efd296951b02c4500cf65https://git.kernel.org/stable/c/463808f237cf73e98a1a45ff7460c2406a150a0bhttps://git.kernel.org/stable/c/53c14e7cc2257191ba15425c15638fc4f8abb92bhttps://git.kernel.org/stable/c/978e5e9111af18741449b81fefd531a622dd969ahttps://git.kernel.org/stable/c/b0fc279de4bf17e1710bb7e83906538ff8f11111https://git.kernel.org/stable/c/bf2a16eb4e6d06124bd8436d4546f61539a65f29https://git.kernel.org/stable/c/d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5bhttps://git.kernel.org/stable/c/d87a4e4094c9879fc8acdff8ce59fdffa979c8e0https://git.kernel.org/stable/c/ef16d8a1798db1a1604ac44ca1bd73ec6bebf483
2025-10-01
Published