01 Record

CVE-2023-54062

ext4: fix invalid free tracking in ext4_xattr_move_to_block()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ext4: fix invalid free tracking in ext4_xattr_move_to_block()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 5.4% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Deferred. NVD last modified this record on 2026-08-04.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-12-24 12:23Z8 MO AGO

Last updated

2026-08-05 09:16Z1 MO AGO

Reserved

2025-12-24

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

a7c131917046acd4c065e16556a4965b067dc50bd44f3cfecb69dd09578cc55a

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc7851208abffe5ae4deb01cf48763911dc14fc67 to < 76887be2a96193cd11be818551b8934ecdb3123f, f5cdc6a7339f250d44d4d469ed7a474ac0d6c7a7 to < f30f3391d089dc91aef91d08f4b04a6c0df2b067, 3b28c799a1334adb5a19f42f03abe0d8cbb05938 to < ba04d6af5ac440a6d5a2d35dc1d8e2cb0323550a, d738789ae9ec47d3458a008788f3cdc862ebf0cb to < 1a8822343e67432b658145d2760a524c884da9d4, a6744e14ce7045ab1a728bde9595f62fbd39f1d2 to < 8beaa3cb293a8f7bacf711cf52201d59859dbc40, 8b6d06b3be7648b3b0f428558293ddf6e2cb94bf to < c5fa4eedddd1c8342ce533cb401c0e693e55b4e3, d2efaf8c870c7067b8d1779773134f3481cd8f68 to < a18670395e5f28acddeca037c5e4bd2ea961b70a, 1e9d62d252812575ded7c620d8fc67c32ff06c16 to < b2fab1807d26acd1c6115b95b5eddd697d84751b, 1e9d62d252812575ded7c620d8fc67c32ff06c16 to < b87c7cdf2bed4928b899e1ce91ef0d147017ba45, 4.14.308 to < 4.14.315, 4.19.276 to < 4.19.283, 5.4.235 to < 5.4.243, 5.10.173 to < 5.10.180, 5.15.99 to < 5.15.112, 6.1.16 to < 6.1.29, 6.2.3 to < 6.2.16, 6.3—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/76887be2a96193cd11be818551b8934ecdb3123f
git.kernel.orghttps://git.kernel.org/stable/c/f30f3391d089dc91aef91d08f4b04a6c0df2b067
git.kernel.orghttps://git.kernel.org/stable/c/ba04d6af5ac440a6d5a2d35dc1d8e2cb0323550a
git.kernel.orghttps://git.kernel.org/stable/c/1a8822343e67432b658145d2760a524c884da9d4
git.kernel.orghttps://git.kernel.org/stable/c/8beaa3cb293a8f7bacf711cf52201d59859dbc40
git.kernel.orghttps://git.kernel.org/stable/c/c5fa4eedddd1c8342ce533cb401c0e693e55b4e3
git.kernel.orghttps://git.kernel.org/stable/c/a18670395e5f28acddeca037c5e4bd2ea961b70a
git.kernel.orghttps://git.kernel.org/stable/c/b2fab1807d26acd1c6115b95b5eddd697d84751b
git.kernel.orghttps://git.kernel.org/stable/c/b87c7cdf2bed4928b899e1ce91ef0d147017ba45

01 Record index

CVE-2023-54062

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-54062

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References