CVE-2023-53301

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53301

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: f2fs: fix kernel crash due to null io->bio We should return when io->bio is null before doing anything. Otherwise, panic. BUG: kernel NULL pointer dereference, address: 0000000000000010 RIP: 0010:__submit_merged_write_cond+0x164/0x240 [f2fs] Call Trace: <TASK> f2fs_submit_merged_write+0x1d/0x30 [f2fs] commit_checkpoint+0x110/0x1e0 [f2fs] f2fs_write_checkpoint+0x9f7/0xf00 [f2fs] ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] __checkpoint_and_complete_reqs+0x84/0x190 [f2fs] ? preempt_count_add+0x82/0xc0 ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] issue_checkpoint_thread+0x4c/0xf0 [f2fs] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xff/0x130 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2c/0x50 </TASK>

References
Link Resource
https://git.kernel.org/stable/c/267c159f9c7bcb7009dae16889b880c5ed8759a8 Patch
https://git.kernel.org/stable/c/83dbb9a1bd5ef2eea73275906fc50b2fdda39cd5 Patch
https://git.kernel.org/stable/c/eb52f13c6093ac761dbeaa459c810fc0253209fc Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

27 Jan 2026, 18:56

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
First Time Linux linux Kernel
Linux
References () https://git.kernel.org/stable/c/267c159f9c7bcb7009dae16889b880c5ed8759a8 - () https://git.kernel.org/stable/c/267c159f9c7bcb7009dae16889b880c5ed8759a8 - Patch
References () https://git.kernel.org/stable/c/83dbb9a1bd5ef2eea73275906fc50b2fdda39cd5 - () https://git.kernel.org/stable/c/83dbb9a1bd5ef2eea73275906fc50b2fdda39cd5 - Patch
References () https://git.kernel.org/stable/c/eb52f13c6093ac761dbeaa459c810fc0253209fc - () https://git.kernel.org/stable/c/eb52f13c6093ac761dbeaa459c810fc0253209fc - Patch

16 Sep 2025, 12:49

Type Values Removed Values Added
New CVE
Information

Published : 2025-09-16 08:15

Updated : 2026-01-27 18:56

NVD link : CVE-2023-53301

Mitre link : CVE-2023-53301

CVE.ORG link : CVE-2023-53301

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo