CVE-2023-53861

ext4: correct grp validation in ext4_mb_good_group

N/A
Published: December 9, 2025 at 01:30 AM UTC
Updated: June 17, 2026 at 06:46 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v ≥ 6.3.45.10.181 ≤ v < 5.10.1955.15.113 ≤ v < 5.15.1326.1.30 ≤ v < 6.1.536.3.4 ≤ v < 6.46.4 ≤ v < 6.4.166.4 ≤ v < 6.5.36.4 ≤ v < 6.6100c0ad6c04597fefeaaba2bb1827cc015d9506731668cebf45adfb6283e465e641c4f5a21b07afa5.10.1815.15.1135354b2af34064a4579be8bc0e2f15a7b70f14b5f6.1.306.3.46.4620a3c28221bb219b81bc0bffd065cc187494302b4319e457d6e3fb33e443efeaf4634fc36e8a9ed
Vendor states this is fixed in 245759d987b617d183061db6ab8886ebb5cc78e9 (fixed)
Vendor states this is fixed in 3e24082f16825279054a2b8a5e668d65070bbf07 (fixed)
Vendor states this is fixed in 772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d (fixed)
Vendor states this is fixed in 83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4 (fixed)
Vendor states this is fixed in a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93 (fixed)
Vendor states this is fixed in e69d665987db0e37896adf78a7e718f9a0a75d3f (fixed)
Vendor states this is fixed in 5.10.195 (unaffected)
Vendor states this is fixed in 5.15.132 (unaffected)
Vendor states this is fixed in 6.1.53 (unaffected)
Vendor states this is fixed in 6.4 (unaffected)
Vendor states this is fixed in 6.4.16 (unaffected)
Vendor states this is fixed in 6.5.3 (unaffected)
Vendor states this is fixed in 6.6 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card