CVE-2023-53503

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the ext4 filesystem implementation. Specifically, the ext4 get group info() function previously triggered a kernel BUG when encountering an invalid group number, potentially leading to a denial of service. This condition could be induced by modifying the superblock via the block device while the filesystem is mounted, resulting in an underflow and a large block group number. The function has been modified to return NULL instead of triggering a BUG, and callers have been updated to handle this possibility. The function was also un-inlined to reduce compiled text size.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.