CVE-2023-54264NULL Pointer Dereference in Linux

Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 30

Description

In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent) return a null ptr and taking lock on that leads to the null-ptr-deref bug.

Affected Packages4 packages

Linuxlinux/linux_kernel2.6.194.14.322+6
Debianlinux/linux_kernel< 5.10.191-1+3
CVEListV5linux/linuxe5657933863f43cc6bb76a54d659303dafaa9e58e976988bc245ec3768cc0f76bed7d05488a7dd0f+8
debiandebian/linux< linux 6.1.52-1 (bookworm)

🔴Vulnerability Details

3
GHSA
GHSA-vrgf-cf4x-v6w6: In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent)2025-12-30
OSV
fs/sysv: Null check to prevent null-ptr-deref bug2025-12-30
OSV
CVE-2023-54264: In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent) r2025-12-30

📋Vendor Advisories

2
Red Hat
kernel: fs/sysv: Null check to prevent null-ptr-deref bug2025-12-30
Debian
CVE-2023-54264: linux - In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Nu...2023

🕵️Threat Intelligence

1
Wiz
CVE-2023-54264 Impact, Exploitability, and Mitigation Steps | Wiz