CVE-2023-54305

ext4: refuse to create ea block when umounted

N/A
Published: December 30, 2025 at 12:23 PM UTC
Updated: June 17, 2026 at 06:47 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: refuse to create ea block when umounted The ea block expansion need to access s_root while it is already set as NULL when umount is triggered. Refuse this request to avoid panic.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

4.13 ≤ v < 4.14.3084.13 ≤ v < 4.19.2764.13 ≤ v < 5.10.1734.13 ≤ v < 5.15.994.13 ≤ v < 5.4.2354.13 ≤ v < 6.1.164.13 ≤ v < 6.2.34.13 ≤ v < 6.34.13e50e5129f384ae282adebfb561189cdb19b81cee
Vendor states this is fixed in 05cbf6ddd9847c7b4f0662c048f195b09405a9d0 (fixed)
Vendor states this is fixed in 0dc0fa313bb4e86382a3e7125429710d44383196 (fixed)
Vendor states this is fixed in 116008ada3d0de4991099edaf6b8c2e9cd6f225a (fixed)
Vendor states this is fixed in 21f6a80d9234422e2eb445734b22c78fc5bf6719 (fixed)
Vendor states this is fixed in a458a8c1d1fc4e10a1813786132b09a3863ad3f2 (fixed)
Vendor states this is fixed in a92b67e768bde433b9385cde56c09deb58db269e (fixed)
Vendor states this is fixed in aedea161d031502a423ed1c7597754681a4f8cda (fixed)
Vendor states this is fixed in f31173c19901a96bb2ebf6bcfec8a08df7095c91 (fixed)
Vendor states this is fixed in 4.13 (unaffected)
Vendor states this is fixed in 4.14.308 (unaffected)
Vendor states this is fixed in 4.19.276 (unaffected)
Vendor states this is fixed in 5.10.173 (unaffected)
Vendor states this is fixed in 5.15.99 (unaffected)
Vendor states this is fixed in 5.4.235 (unaffected)
Vendor states this is fixed in 6.1.16 (unaffected)
Vendor states this is fixed in 6.2.3 (unaffected)
Vendor states this is fixed in 6.3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card