CVE-2023-53450

ext4: remove a BUG_ON in ext4_mb_release_group_pa()

Severity Score

5.5

*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is
mounted such that the s_first_data_block is set to a very large
number, the calculation of the block group can underflow, and trigger
a BUG_ON check. Change this to be an ext4_warning so that we don't
crash the kernel.

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2025-09-17 CVE Reserved
2025-10-01 CVE Published
2025-10-02 CVE Updated
2025-10-07 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (9)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC
https://git.kernel.org/stable/c/d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b	2023-05-17
https://git.kernel.org/stable/c/ef16d8a1798db1a1604ac44ca1bd73ec6bebf483	2023-05-17
https://git.kernel.org/stable/c/185062a21976fbc38f2efd296951b02c4500cf65	2023-05-17
https://git.kernel.org/stable/c/b0fc279de4bf17e1710bb7e83906538ff8f11111	2023-05-17
https://git.kernel.org/stable/c/978e5e9111af18741449b81fefd531a622dd969a	2023-05-17
https://git.kernel.org/stable/c/d87a4e4094c9879fc8acdff8ce59fdffa979c8e0	2023-05-17
https://git.kernel.org/stable/c/bf2a16eb4e6d06124bd8436d4546f61539a65f29	2023-05-17
https://git.kernel.org/stable/c/53c14e7cc2257191ba15425c15638fc4f8abb92b	2023-05-17
https://git.kernel.org/stable/c/463808f237cf73e98a1a45ff7460c2406a150a0b	2023-05-13

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.14.315 Search vendor "Linux" for product "Linux Kernel" and version " < 4.14.315"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 4.19.283 Search vendor "Linux" for product "Linux Kernel" and version " < 4.19.283"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.4.243 Search vendor "Linux" for product "Linux Kernel" and version " < 5.4.243"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.10.180 Search vendor "Linux" for product "Linux Kernel" and version " < 5.10.180"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 5.15.112 Search vendor "Linux" for product "Linux Kernel" and version " < 5.15.112"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.1.29 Search vendor "Linux" for product "Linux Kernel" and version " < 6.1.29"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.2.16 Search vendor "Linux" for product "Linux Kernel" and version " < 6.2.16"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.3.3 Search vendor "Linux" for product "Linux Kernel" and version " < 6.3.3"		en		Affected
Linux Search vendor "Linux"		Linux Kernel Search vendor "Linux" for product "Linux Kernel"				< 6.4 Search vendor "Linux" for product "Linux Kernel" and version " < 6.4"		en		Affected