CVE-2023-54317

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where the zero page can be corrupted when using dm-flakey with corrupt bio writes enabled. This corruption occurs because the blkdev issue zero pages function submits a write bio with a vector pointing to the zero page, and dm-flakey can corrupt this page. This can lead to crashes in userspace programs, as glibc assumes memory returned by mmap is zeroed and uses it for the calloc implementation. If the mapped memory is not zeroed, calloc may return non-zeroed memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.