CVE-2023-53861
published 2025-12-09CVE-2023-53861: In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access…
PriorityP423medium4.7
EPSS
0.20%
10.6th percentile
In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will access memory of grp and will trigger kernel
crash if grp is NULL. So do NULL check before corruption check.
Affected
22 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.55-1 (bookworm) | linux 6.1.55-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 100c0ad6c04597fefeaaba2bb1827cc015d95067 < 245759d987b617d183061db6ab8886ebb5cc78e9 | 245759d987b617d183061db6ab8886ebb5cc78e9 |
| linux | linux | >= 5.10.181 < 5.10.195 | 5.10.195 |
| linux | linux | >= 5.15.113 < 5.15.132 | 5.15.132 |
| linux | linux | >= 5354b2af34064a4579be8bc0e2f15a7b70f14b5f < 83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4 | 83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4 |
| linux | linux | >= 5354b2af34064a4579be8bc0e2f15a7b70f14b5f < e69d665987db0e37896adf78a7e718f9a0a75d3f | e69d665987db0e37896adf78a7e718f9a0a75d3f |
| linux | linux | >= 5354b2af34064a4579be8bc0e2f15a7b70f14b5f < a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93 | a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93 |
| linux | linux | >= 6.1.30 < 6.1.53 | 6.1.53 |
| linux | linux | >= 6.3.4 < 6.4 | 6.4 |
| linux | linux | >= 620a3c28221bb219b81bc0bffd065cc187494302 < 3e24082f16825279054a2b8a5e668d65070bbf07 | 3e24082f16825279054a2b8a5e668d65070bbf07 |
| linux | linux | >= b4319e457d6e3fb33e443efeaf4634fc36e8a9ed < 772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d | 772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.55-1 | 6.1.55-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 0 < 6.5.3-1 | 6.5.3-1 |
| linux | linux_kernel | >= 0 < 5.10.195 | 5.10.195 |
| linux | linux_kernel | >= 5.11.0 < 5.15.132 | 5.15.132 |
| linux | linux_kernel | >= 5.16.0 < 6.1.53 | 6.1.53 |
| linux | linux_kernel | >= 6.2.0 < 6.4.16 | 6.4.16 |
| linux | linux_kernel | >= 6.4.0 < 6.5.3 | 6.5.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ext4: correct grp validation in ext4_mb_good_group
vendor_redhat·2025-12-09·CVSS 4.7
CVE-2023-53861 [MEDIUM] CWE-476 kernel: ext4: correct grp validation in ext4_mb_good_group
kernel: ext4: correct grp validation in ext4_mb_good_group
In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will access memory of grp and will trigger kernel
crash if grp is NULL. So do NULL check before corruption check.
A NULL pointer dereference vulnerability was found in the ext4 filesystem in the Linux kernel. In ext4_mb_good_group(), the group corruption check accesses the grp structure memory before verifying that grp is not NULL. If grp is NULL, this leads to a kernel crash. The fix adds a NULL check before performing the corruption check.
Statement: This is a NULL pointer dereference in ext4's multiblock allocator that can cause a kernel crash. The vulnerability requires specific filesy
Debian
CVE-2023-53861: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: corre...
vendor_debian·2023
CVE-2023-53861 CVE-2023-53861: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: corre...
In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.
Scope: local
bookworm: resolved (fixed in 6.1.55-1)
bullseye: resolved (fixed in 5.10.197-1)
forky: resolved (fixed in 6.5.3-1)
sid: resolved (fixed in 6.5.3-1)
trixie: resolved (fixed in 6.5.3-1)
OSV
CVE-2023-53861: In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will acc
osv·2025-12-09
CVE-2023-53861 CVE-2023-53861: In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will acc
In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.
OSV
ext4: correct grp validation in ext4_mb_good_group
osv·2025-12-09
CVE-2023-53861 ext4: correct grp validation in ext4_mb_good_group
ext4: correct grp validation in ext4_mb_good_group
In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will access memory of grp and will trigger kernel
crash if grp is NULL. So do NULL check before corruption check.
GHSA
GHSA-9chw-7w35-c7qm: In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will a
ghsa_unreviewed·2025-12-09
CVE-2023-53861 GHSA-9chw-7w35-c7qm: In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will a
In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will access memory of grp and will trigger kernel
crash if grp is NULL. So do NULL check before corruption check.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-53861 kernel: ext4: correct grp validation in ext4_mb_good_group
bugzilla·2025-12-09
CVE-2023-53861 [MEDIUM] CVE-2023-53861 kernel: ext4: correct grp validation in ext4_mb_good_group
CVE-2023-53861 kernel: ext4: correct grp validation in ext4_mb_good_group
In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will access memory of grp and will trigger kernel
crash if grp is NULL. So do NULL check before corruption check.
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025120905-CVE-2023-53861-22c6@gregkh/T
Wiz
CVE-2023-53861 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-53861 CVE-2023-53861 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-53861 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
ext4: correct grp validation in ext4_mb_good_group
Group corruption check will access memory of grp and will trigger kernel
crash if grp is NULL. So do NULL check before corruption check.
Source : NVD
Published December 9, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Exploit No
Has CISA KEV Exploit No
CISA KEV Release Date N/A
CISA KEV Due Date N/A
Exploitation Probability Percentile (EPSS) 10.8
Exploitation Probability (EPSS) N/A
Affected packages and libraries
dtb-hisilicon
kernel-docs-html
Sources
NVD
Debian 11, 12, 13, 14 Has Fix Added at: Dec 09, 2025
Echo Has Fix Added at: Dec 09, 2025
Red H
https://git.kernel.org/stable/c/245759d987b617d183061db6ab8886ebb5cc78e9https://git.kernel.org/stable/c/3e24082f16825279054a2b8a5e668d65070bbf07https://git.kernel.org/stable/c/772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035dhttps://git.kernel.org/stable/c/83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4https://git.kernel.org/stable/c/a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93https://git.kernel.org/stable/c/e69d665987db0e37896adf78a7e718f9a0a75d3f
2025-12-09
Published