01 Record

CVE-2023-54317

dm flakey: don't corrupt the zero page

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

dm flakey: don't corrupt the zero page

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.15% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 4.5% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-15.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-12-30 12:23Z10 MO AGO
Last updated: 2026-10-15 21:41Z14 DAYS AGO
Reserved: 2025-12-30
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 066c75d2c97f7dc2543de3ad248e826a693689d3cd65619085e27128d6ee4375

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxc6cd92fcabd6cc78bb1808c6a18245c842722fc1 to < b7f8892f672222dbfcc721f51edc03963212b249, d4c637af2e56ee1ec66ee34d0ac5a13c75911aec to < 98e311be44dbe31ad9c42aa067b2359bac451fda, a00f5276e26636cbf72f24f79831026d2e2868e7 to < 3c4a56ef7c538d16c1738ba0ccea9e7146105b5a, a00f5276e26636cbf72f24f79831026d2e2868e7 to < f2b478228bfdd11e358c5bc197561331f5d5c394, a00f5276e26636cbf72f24f79831026d2e2868e7 to < ff60b2bb680ebcaf8890814dd51084a022891469, a00f5276e26636cbf72f24f79831026d2e2868e7 to < be360c83f2d810493c04f999d69ec9152981e0c0, a00f5276e26636cbf72f24f79831026d2e2868e7 to < 63d31617883d64b43b0e2d529f0751f40713ecae, a00f5276e26636cbf72f24f79831026d2e2868e7 to < f50714b57aecb6b3dc81d578e295f86d9c73f078, 1ed7c9f45fb893877ffa7cedd7aa61beaadbb328, 4.14.158 to < 4.14.308, 4.19.88 to < 4.19.276, 4.9.206 to < 4.10, 5.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/b7f8892f672222dbfcc721f51edc03963212b249
git.kernel.orghttps://git.kernel.org/stable/c/98e311be44dbe31ad9c42aa067b2359bac451fda
git.kernel.orghttps://git.kernel.org/stable/c/3c4a56ef7c538d16c1738ba0ccea9e7146105b5a
git.kernel.orghttps://git.kernel.org/stable/c/f2b478228bfdd11e358c5bc197561331f5d5c394
git.kernel.orghttps://git.kernel.org/stable/c/ff60b2bb680ebcaf8890814dd51084a022891469
git.kernel.orghttps://git.kernel.org/stable/c/be360c83f2d810493c04f999d69ec9152981e0c0
git.kernel.orghttps://git.kernel.org/stable/c/63d31617883d64b43b0e2d529f0751f40713ecae
git.kernel.orghttps://git.kernel.org/stable/c/f50714b57aecb6b3dc81d578e295f86d9c73f078

07 Fixed in

Debian 12

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.1.20-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.