CVE-2023-54317 — Missing Initialization of Resource in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 89.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedDec 30
Description
In the Linux kernel, the following vulnerability has been resolved:
dm flakey: don't corrupt the zero page
When we need to zero some range on a block device, the function
__blkdev_issue_zero_pages submits a write bio with the bio vector pointing
to the zero page. If we use dm-flakey with corrupt bio writes option, it
will corrupt the content of the zero page which results in crashes of
various userspace programs. Glibc assumes that memory returned by mmap is
zeroed and it uses it for calloc im…
Affected Packages4 packages
▶CVEListV5linux/linuxc6cd92fcabd6cc78bb1808c6a18245c842722fc1 — b7f8892f672222dbfcc721f51edc03963212b249+9
🔴Vulnerability Details
3OSV▶
CVE-2023-54317: In the Linux kernel, the following vulnerability has been resolved: dm flakey: don't corrupt the zero page When we need to zero some range on a block↗2025-12-30
GHSA▶
GHSA-8m2v-q2gj-8gq3: In the Linux kernel, the following vulnerability has been resolved:
dm flakey: don't corrupt the zero page
When we need to zero some range on a bloc↗2025-12-30