CVE-2023-53861

In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/245759d987b617d183061db6ab8886ebb5cc78e9
https://git.kernel.org/stable/c/3e24082f16825279054a2b8a5e668d65070bbf07
https://git.kernel.org/stable/c/772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d
https://git.kernel.org/stable/c/83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4
https://git.kernel.org/stable/c/a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93
https://git.kernel.org/stable/c/e69d665987db0e37896adf78a7e718f9a0a75d3f

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-09 16:17

Updated : 2026-06-17 06:46

NVD link : CVE-2023-53861

Mitre link : CVE-2023-53861

CVE.ORG link : CVE-2023-53861

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-53861", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "100c0ad6c04597fefeaaba2bb1827cc015d95067", "lessThan": "245759d987b617d183061db6ab8886ebb5cc78e9", "versionType": "git"}, {"status": "affected", "version": "620a3c28221bb219b81bc0bffd065cc187494302", "lessThan": "3e24082f16825279054a2b8a5e668d65070bbf07", "versionType": "git"}, {"status": "affected", "version": "b4319e457d6e3fb33e443efeaf4634fc36e8a9ed", "lessThan": "772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d", "versionType": "git"}, {"status": "affected", "version": "5354b2af34064a4579be8bc0e2f15a7b70f14b5f", "lessThan": "83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4", "versionType": "git"}, {"status": "affected", "version": "5354b2af34064a4579be8bc0e2f15a7b70f14b5f", "lessThan": "e69d665987db0e37896adf78a7e718f9a0a75d3f", "versionType": "git"}, {"status": "affected", "version": "5354b2af34064a4579be8bc0e2f15a7b70f14b5f", "lessThan": "a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93", "versionType": "git"}, {"status": "affected", "version": "31668cebf45adfb6283e465e641c4f5a21b07afa", "versionType": "git"}, {"status": "affected", "version": "5.10.181", "lessThan": "5.10.195", "versionType": "semver"}, {"status": "affected", "version": "5.15.113", "lessThan": "5.15.132", "versionType": "semver"}, {"status": "affected", "version": "6.1.30", "lessThan": "6.1.53", "versionType": "semver"}, {"status": "affected", "version": "6.3.4", "lessThan": "6.4", "versionType": "semver"}], "programFiles": ["fs/ext4/mballoc.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.4"}, {"status": "unaffected", "version": "0", "lessThan": "6.4", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.195", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.132", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.53", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.4.16", "versionType": "semver", "lessThanOrEqual": "6.4.*"}, {"status": "unaffected", "version": "6.5.3", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ext4/mballoc.c"], "defaultStatus": "affected"}]}], "published": "2025-12-09T16:17:26.857", "references": [{"url": "https://git.kernel.org/stable/c/245759d987b617d183061db6ab8886ebb5cc78e9", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3e24082f16825279054a2b8a5e668d65070bbf07", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/e69d665987db0e37896adf78a7e718f9a0a75d3f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: correct grp validation in ext4_mb_good_group\n\nGroup corruption check will access memory of grp and will trigger kernel\ncrash if grp is NULL. So do NULL check before corruption check."}], "lastModified": "2026-06-17T06:46:12.180", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}