cbcvebase.
CVE-2023-54167
published 2025-12-30

CVE-2023-54167: In the Linux kernel, the following vulnerability has been resolved: m68k: mm: Move initrd phys_to_virt handling after paging_init() When booting with an…

PriorityP420medium6.9
EPSS
0.17%
6.9th percentile
In the Linux kernel, the following vulnerability has been resolved: m68k: mm: Move initrd phys_to_virt handling after paging_init() When booting with an initial ramdisk on platforms where physical memory does not start at address zero (e.g. on Amiga): initrd: 0ef0602c - 0f800000 Zone ranges: DMA [mem 0x0000000008000000-0x000000f7ffffffff] Normal empty Movable zone start for each node Early memory node ranges node 0: [mem 0x0000000008000000-0x000000000f7fffff] Initmem setup node 0 [mem 0x0000000008000000-0x000000000f7fffff] Unable to handle kernel access at virtual address (ptrval) Oops: 00000000 Modules linked in: PC: [] memcmp+0x28/0x56 As phys_to_virt() relies on m68k_memoffset and module_fixup(), it must not be called before paging_init(). Hence postpone the phys_to_virt handling for the initial ramdisk until after calling paging_init(). While at it, reduce #ifdef clutter by using IS_ENABLED() instead.

Affected

10 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.20-1 (bookworm)linux 6.1.20-1 (bookworm)
linuxlinux
linuxlinux>= 376e3fdecb0dcae216c0ac559cff066f460bf47b < ceb089e2337f810d3594d310953d9af4783f660aceb089e2337f810d3594d310953d9af4783f660a
linuxlinux>= 376e3fdecb0dcae216c0ac559cff066f460bf47b < 58662cfb459150b9c0c22d20cddaea439b3844bd58662cfb459150b9c0c22d20cddaea439b3844bd
linuxlinux>= 376e3fdecb0dcae216c0ac559cff066f460bf47b < d4b97925e87eb133e400fe4a482d750c74ce392fd4b97925e87eb133e400fe4a482d750c74ce392f
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 0 < 6.1.20-16.1.20-1
linuxlinux_kernel>= 5.17.0 < 6.1.206.1.20
linuxlinux_kernel>= 6.2.0 < 6.2.76.2.7
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.