CVE-2023-54021 — Integer Underflow (Wrap or Wraparound) in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_ex to notify the goal start used in
ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in
ext4_mb_normalize_request.
Besides we should assure goal start is in range [first_data_block,
blocks_count) as ext4_mb_initialize_context does.
[ Added a check to make sure size is less than ar->pright; otherwise
we could end up passing an underflowed value…
Affected Packages4 packages
▶CVEListV5linux/linuxc9de560ded61faa5b754137b7753da252391c55a — 2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530+8
🔴Vulnerability Details
3GHSA▶
GHSA-xwm6-35hh-fmxm: In the Linux kernel, the following vulnerability has been resolved:
ext4: set goal start correctly in ext4_mb_normalize_request
We need to set ac_g_↗2025-12-24
OSV▶
CVE-2023-54021: In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex↗2025-12-24