CVE-2023-54021
published 2025-12-24CVE-2023-54021: In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to…
PriorityP421low5.5
EPSS
0.17%
6.8th percentile
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value of ar->pright - size to
ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on.
- TYT ]
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.37-1 (bookworm) | linux 6.1.37-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530 | 2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 390eee955d4de4662db5e3e9e9a9eae020432cb7 | 390eee955d4de4662db5e3e9e9a9eae020432cb7 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < cee78217a7ae72d11c2e21e1a5263b8044489823 | cee78217a7ae72d11c2e21e1a5263b8044489823 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < 3ca3005b502ca8ea87d6a344323b179b48c4e4a3 | 3ca3005b502ca8ea87d6a344323b179b48c4e4a3 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < bc4a3e1d07a86ae5845321d371190244acacb2f2 | bc4a3e1d07a86ae5845321d371190244acacb2f2 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < c6bee8970075b256fc1b07bf4873049219380818 | c6bee8970075b256fc1b07bf4873049219380818 |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < abb330ffaa3a0ae7ce632e28c9260b461c01f19f | abb330ffaa3a0ae7ce632e28c9260b461c01f19f |
| linux | linux | >= c9de560ded61faa5b754137b7753da252391c55a < b07ffe6927c75d99af534d685282ea188d9f71a6 | b07ffe6927c75d99af534d685282ea188d9f71a6 |
| linux | linux_kernel | >= 0 < 5.10.191-1 | 5.10.191-1 |
| linux | linux_kernel | >= 0 < 6.1.37-1 | 6.1.37-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 0 < 6.3.7-1 | 6.3.7-1 |
| linux | linux_kernel | >= 2.6.25 < 4.14.316 | 4.14.316 |
| linux | linux_kernel | >= 4.15.0 < 4.19.284 | 4.19.284 |
| linux | linux_kernel | >= 4.20.0 < 5.4.244 | 5.4.244 |
| linux | linux_kernel | >= 5.11.0 < 5.15.113 | 5.15.113 |
| linux | linux_kernel | >= 5.16.0 < 6.1.30 | 6.1.30 |
| linux | linux_kernel | >= 5.5.0 < 5.10.181 | 5.10.181 |
| linux | linux_kernel | >= 6.2.0 < 6.3.4 | 6.3.4 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ext4: set goal start correctly in ext4_mb_normalize_request
osv·2025-12-24
CVE-2023-54021 ext4: set goal start correctly in ext4_mb_normalize_request
ext4: set goal start correctly in ext4_mb_normalize_request
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value of ar->pright - size to
ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on.
- TYT ]
GHSA
GHSA-xwm6-35hh-fmxm: In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_
ghsa_unreviewed·2025-12-24
CVE-2023-54021 GHSA-xwm6-35hh-fmxm: In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value of ar->pright - size to
ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on.
- TYT ]
OSV
CVE-2023-54021: In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex
osv·2025-12-24
CVE-2023-54021 CVE-2023-54021: In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex
In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_request. Besides we should assure goal start is in range [first_data_block, blocks_count) as ext4_mb_initialize_context does. [ Added a check to make sure size is less than ar->pright; otherwise we could end up passing an underflowed value of ar->pright - size to ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on. - TYT ]
Red Hat
kernel: ext4: set goal start correctly in ext4_mb_normalize_request
vendor_redhat·2025-12-24·CVSS 5.5
CVE-2023-54021 [LOW] CWE-191 kernel: ext4: set goal start correctly in ext4_mb_normalize_request
kernel: ext4: set goal start correctly in ext4_mb_normalize_request
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value of ar->pright - size to
ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on.
- TYT ]
A flaw was found in the Linux kernel's ext4 filesystem block allocator. In ext4_mb_normalize_request(), the goal start was being s
Debian
CVE-2023-54021: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: set g...
vendor_debian·2023
CVE-2023-54021 CVE-2023-54021: linux - In the Linux kernel, the following vulnerability has been resolved: ext4: set g...
In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_request. Besides we should assure goal start is in range [first_data_block, blocks_count) as ext4_mb_initialize_context does. [ Added a check to make sure size is less than ar->pright; otherwise we could end up passing an underflowed value of ar->pright - size to ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on. - TYT ]
Scope: local
bookworm: resolved (fixed in 6.1.37-1)
bullseye: resolved (fixed in 5.10.191-1)
forky: resolved (fixed in 6.3.7-1)
sid: resolved (fixed in 6.3.7-1)
trixie: resolved (fixed in 6.3.7-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2023-54021 kernel: ext4: set goal start correctly in ext4_mb_normalize_request
bugzilla·2025-12-24
CVE-2023-54021 [LOW] CVE-2023-54021 kernel: ext4: set goal start correctly in ext4_mb_normalize_request
CVE-2023-54021 kernel: ext4: set goal start correctly in ext4_mb_normalize_request
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value of ar->pright - size to
ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on.
- TYT ]
Discussion:
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2025122433-CVE-2023-54021-15bf@gregkh
Wiz
CVE-2023-54021 Impact, Exploitability, and Mitigation Steps | Wiz
blogs_wiz
CVE-2023-54021 CVE-2023-54021 Impact, Exploitability, and Mitigation Steps | Wiz
## CVE-2023-54021 :
Linux Kernel vulnerability analysis and mitigation
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value of ar->pright - size to
ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on.
TYT ]
Source : NVD
Published December 24, 2025
CNA Score N/A
Affected Technologies
Linux Kernel
Linux Debian
Has Public Expl
https://git.kernel.org/stable/c/2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530https://git.kernel.org/stable/c/390eee955d4de4662db5e3e9e9a9eae020432cb7https://git.kernel.org/stable/c/3ca3005b502ca8ea87d6a344323b179b48c4e4a3https://git.kernel.org/stable/c/abb330ffaa3a0ae7ce632e28c9260b461c01f19fhttps://git.kernel.org/stable/c/b07ffe6927c75d99af534d685282ea188d9f71a6https://git.kernel.org/stable/c/bc4a3e1d07a86ae5845321d371190244acacb2f2https://git.kernel.org/stable/c/c6bee8970075b256fc1b07bf4873049219380818https://git.kernel.org/stable/c/cee78217a7ae72d11c2e21e1a5263b8044489823
2025-12-24
Published