ghsa-x38v-9849-rp33
Vulnerability from github
Published
2025-12-30 15:30
Modified
2025-12-30 15:30
Details

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block

We got a kernel panic if old_addr is NULL.

https://bugzilla.kernel.org/show_bug.cgi?id=217266

BUG: kernel NULL pointer dereference, address: 0000000000000000 Call Trace: f2fs_commit_atomic_write+0x619/0x990 [f2fs a1b985b80f5babd6f3ea778384908880812bfa43] __f2fs_ioctl+0xd8e/0x4080 [f2fs a1b985b80f5babd6f3ea778384908880812bfa43] ? vfs_write+0x2ae/0x3f0 ? vfs_write+0x2ae/0x3f0 __x64_sys_ioctl+0x91/0xd0 do_syscall_64+0x5c/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc RIP: 0033:0x7f69095fe53f

Show details on source website

To clipboard 

{
  "affected": [],
  "aliases": [
    "CVE-2023-54192"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-30T13:16:07Z",
    "severity": null
  },
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block\n\nWe got a kernel panic if old_addr is NULL.\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id=217266\n\nBUG: kernel NULL pointer dereference, address: 0000000000000000\n Call Trace:\n  \u003cTASK\u003e\n  f2fs_commit_atomic_write+0x619/0x990 [f2fs a1b985b80f5babd6f3ea778384908880812bfa43]\n  __f2fs_ioctl+0xd8e/0x4080 [f2fs a1b985b80f5babd6f3ea778384908880812bfa43]\n  ? vfs_write+0x2ae/0x3f0\n  ? vfs_write+0x2ae/0x3f0\n  __x64_sys_ioctl+0x91/0xd0\n  do_syscall_64+0x5c/0x90\n  entry_SYSCALL_64_after_hwframe+0x72/0xdc\n RIP: 0033:0x7f69095fe53f",
  "id": "GHSA-x38v-9849-rp33",
  "modified": "2025-12-30T15:30:31Z",
  "published": "2025-12-30T15:30:31Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-54192"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/1424358cd66c49460493293497b54cb72e0213cc"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/424f8cdc0ad29e4940be96dcc0b935ba497adeda"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/da6ea0b050fa720302b56fbb59307e7c7531a342"
    },
    {
      "type": "WEB",
      "url": "https://git.kernel.org/stable/c/e2bbefc1741cb0732c13652be173da02f25611d1"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.