CVE-2023-54089 — Operation on a Resource after Expiration or Release in Linux
Severity
6.2MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
virtio_pmem: add the missing REQ_OP_WRITE for flush bio
When doing mkfs.xfs on a pmem device, the following warning was
------------[ cut here ]------------
WARNING: CPU: 2 PID: 384 at block/blk-core.c:751 submit_bio_noacct
Modules linked in:
CPU: 2 PID: 384 Comm: mkfs.xfs Not tainted 6.4.0-rc7+ #154
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)
RIP: 0010:submit_bio_noacct+0x340/0x520
......
Call Trace:
? submit_bio_…
Affected Packages4 packages
▶CVEListV5linux/linuxb4a6bb3a67aa0c37b2b6cd47efc326eb455de674 — e39e870e1e683a71d3d2e63e661a5695f60931a7+3
🔴Vulnerability Details
3GHSA▶
GHSA-v2v9-hx36-32x2: In the Linux kernel, the following vulnerability has been resolved:
virtio_pmem: add the missing REQ_OP_WRITE for flush bio
When doing mkfs↗2025-12-24
OSV▶
CVE-2023-54089: In the Linux kernel, the following vulnerability has been resolved: virtio_pmem: add the missing REQ_OP_WRITE for flush bio When doing mkfs↗2025-12-24