CVE-2023-54278 — Use After Free in Linux
Severity
5.8MEDIUM
No vectorEPSS
0.0%
top 92.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
s390/vmem: split pages when debug pagealloc is enabled
Since commit bb1520d581a3 ("s390/mm: start kernel with DAT enabled")
the kernel crashes early during boot when debug pagealloc is enabled:
mem auto-init: stack:off, heap alloc:off, heap free:off
addressing exception: 0005 ilc:2 [#1] SMP DEBUG_PAGEALLOC
Modules linked in:
CPU: 0 PID: 0 Comm: swapper Not tainted 6.5.0-rc3-09759-gc5666c912155 #630
[..]
Krnl Code: 00000000001…
Affected Packages4 packages
▶CVEListV5linux/linuxbb1520d581a3a46e2d6e12bb74604ace33404de5 — 601e467e29a960f7ab7ec4075afc6a68c3532a65+2
🔴Vulnerability Details
3GHSA▶
GHSA-wr38-v9r2-5hhw: In the Linux kernel, the following vulnerability has been resolved:
s390/vmem: split pages when debug pagealloc is enabled
Since commit bb1520d581a3↗2025-12-30
OSV▶
CVE-2023-54278: In the Linux kernel, the following vulnerability has been resolved: s390/vmem: split pages when debug pagealloc is enabled Since commit bb1520d581a3 (↗2025-12-30