CVE-2023-54121 — Integer Overflow or Wraparound in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 93.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 24
Description
In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
In production we were seeing a variety of WARN_ON()'s in the extent_map
code, specifically in btrfs_drop_extent_map_range() when we have to call
add_extent_mapping() for our second split.
Consider the following extent map layout
PINNED
[0 16K) [32K, 48K)
and then we call btrfs_drop_extent_map_range for [0, 36K), with
skip_pinned == true. The initial loop will hav…
Affected Packages4 packages
▶CVEListV5linux/linux55ef68990029fcd8d04d42fc184aa7fb18cf309e — 9f68e2105dd96cf0fafffffafb2337fbd0fbae1f+4
🔴Vulnerability Details
3GHSA▶
GHSA-8482-4rvj-5h62: In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix incorrect splitting in btrfs_drop_extent_map_range
In production we w↗2025-12-24
OSV▶
CVE-2023-54121: In the Linux kernel, the following vulnerability has been resolved: btrfs: fix incorrect splitting in btrfs_drop_extent_map_range In production we wer↗2025-12-24