PT-2025-53217 · Linux+1 · Linux Kernel+1

CVE-2023-54140

·

Published

2023-08-21

·

Updated

2026-07-02

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the nilfs2 file system within the Linux kernel where a kernel warning or panic may occur due to the reuse of discarded buffers in the mark buffer dirty() function, specifically when called from nilfs mark inode dirty() or nilfs palloc commit alloc entry(). This issue arises because nilfs2 maintains buffer pointers for metadata and reuses them, but these buffers can be discarded by nilfs clear dirty page() under certain conditions. The problem was reported after commit 28a65b49eb53 but may have existed previously. The fix involves verifying the uptodate flag before reusing an internal buffer and reloading metadata if the flag is lost.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Race Condition

Use After Free

RCE

Improper Check for Exceptional Conditions

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12417
CVE-2023-54140
SUSE-SU-2026:0263-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:0411-1
SUSE-SU-2026:0617-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1

Affected Products

Linux Kernel
Red Os