目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

CVE-2023-54153— Linux kernel 安全漏洞

CVSS 7.8 · High EPSS 0.14% · P4

Affected Version Matrix 18

ベンダープロダクトVersion Rangeステータス
LinuxLinux11215630aada28307ba555a43138db6ac54fa825< c327b83c59ee938792a0300df646efac39c7d6a7affected
11215630aada28307ba555a43138db6ac54fa825< deef86fa3005cbb61ae8aa5729324c09b3f4ba73affected
11215630aada28307ba555a43138db6ac54fa825< 77c3ca1108eb4a26db4f256c42b271a430cebc7daffected
11215630aada28307ba555a43138db6ac54fa825< d13f99632748462c32fc95d729f5e754bab06064affected
60e2824ab30a19c7aaf5a3932bc155d18b2cd816affected
a6d49257cbe53c7bca1a0353a6443f53cbed9cc7affected
2e7312ddaf629eecf4702b662da477a3bc39c31aaffected
d558851e5ff443b020245b7a1a455c55accf740baffected
… +10 more rows
新しい脆弱性情報の通知を購読するログインして購読

I. CVE-2023-54153の基本情報

脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗

高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。

脆弱性タイトル
ext4: turn quotas off if mount failed after enabling quotas
ソース: CVE Program / CVE List V5
脆弱性説明
In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount failed after enabling quotas Yi found during a review of the patch "ext4: don't BUG on inconsistent journal feature" that when ext4_mark_recovery_complete() returns an error value, the error handling path does not turn off the enabled quotas, which triggers the following kmemleak: ================================================================ unreferenced object 0xffff8cf68678e7c0 (size 64): comm "mount", pid 746, jiffies 4294871231 (age 11.540s) hex dump (first 32 bytes): 00 90 ef 82 f6 8c ff ff 00 00 00 00 41 01 00 00 ............A... c7 00 00 00 bd 00 00 00 0a 00 00 00 48 00 00 00 ............H... backtrace: [<00000000c561ef24>] __kmem_cache_alloc_node+0x4d4/0x880 [<00000000d4e621d7>] kmalloc_trace+0x39/0x140 [<00000000837eee74>] v2_read_file_info+0x18a/0x3a0 [<0000000088f6c877>] dquot_load_quota_sb+0x2ed/0x770 [<00000000340a4782>] dquot_load_quota_inode+0xc6/0x1c0 [<0000000089a18bd5>] ext4_enable_quotas+0x17e/0x3a0 [ext4] [<000000003a0268fa>] __ext4_fill_super+0x3448/0x3910 [ext4] [<00000000b0f2a8a8>] ext4_fill_super+0x13d/0x340 [ext4] [<000000004a9489c4>] get_tree_bdev+0x1dc/0x370 [<000000006e723bf1>] ext4_get_tree+0x1d/0x30 [ext4] [<00000000c7cb663d>] vfs_get_tree+0x31/0x160 [<00000000320e1bed>] do_new_mount+0x1d5/0x480 [<00000000c074654c>] path_mount+0x22e/0xbe0 [<0000000003e97a8e>] do_mount+0x95/0xc0 [<000000002f3d3736>] __x64_sys_mount+0xc4/0x160 [<0000000027d2140c>] do_syscall_64+0x3f/0x90 ================================================================ To solve this problem, we add a "failed_mount10" tag, and call ext4_quota_off_umount() in this tag to release the enabled qoutas.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
ソース: CVE Program / CVE List V5
脆弱性タイプ
N/A
ソース: CVE Program / CVE List V5
脆弱性タイトル
Linux kernel 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未关闭配额，可能导致内存泄露。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)

影響を受ける製品

ベンダープロダクト影響を受けるバージョンCPE購読
LinuxLinux 11215630aada28307ba555a43138db6ac54fa825 ~ c327b83c59ee938792a0300df646efac39c7d6a7 -
LinuxLinux 5.9 -

II. CVE-2023-54153の公開POC

#POC説明ソースリンクShenlongリンク
AI生成POCプレミアム

公開POCは見つかりませんでした。

ログインしてAI POCを生成

III. CVE-2023-54153のインテリジェンス情報

请登录查看更多情报信息。

CVE-2023-54153 其他参考 (3)

Same Patch Batch · Linux · 2025-12-24 · 322 CVEs total

CVE-2023-540769.8 CRITICALsmb: client: fix missed ses refcounting
CVE-2022-507179.8 CRITICALnvmet-tcp: add bounds check on Transfer Tag
CVE-2025-687459.8 CRITICALscsi: qla2xxx: Clear cmds after chip reset
CVE-2025-687419.8 CRITICALscsi: qla2xxx: Fix improper freeing of purex item
CVE-2023-540909.8 CRITICALixgbe: Fix panic during XDP_TX with > 64 CPUs
CVE-2023-540949.8 CRITICALnet: prevent skb corruption on frag list segmentation
CVE-2023-538679.8 CRITICALceph: fix potential use-after-free bug when trimming caps
CVE-2025-683599.8 CRITICALbtrfs: fix double free of qgroup record after failure to add delayed ref head
CVE-2025-687269.8 CRITICALcrypto: aead - Fix reqsize handling
CVE-2023-539969.3 CRITICALx86/sev: Make enc_dec_hypercall() accept a size instead of npages
CVE-2023-540718.8 HIGHwifi: rtw88: use work to update rate to avoid RCU warning
CVE-2023-540608.8 HIGHiommufd: Set end correctly when doing batch carry
CVE-2023-540438.8 HIGHiommufd: Do not add the same hwpt to the ioas->hwpt_list twice
CVE-2022-507328.8 HIGHstaging: rtl8192u: Fix use after free in ieee80211_rx()
CVE-2025-687368.8 HIGHlandlock: Fix handling of disconnected directories
CVE-2023-540408.8 HIGHice: fix wrong fallback logic for FDIR
CVE-2023-540928.8 HIGHKVM: s390: pv: fix index value of replaced ASCE
CVE-2023-541208.8 HIGHBluetooth: Fix race condition in hidp_session_thread
CVE-2023-539868.6 HIGHmips: bmips: BCM6358: disable RAC flush for TP1
CVE-2022-507468.4 HIGHerofs: validate the extent length for uncompressed pclusters

Showing 20 of 322 CVEs. View all on vendor page →

IV. 関連脆弱性

同じ製品: Linux
同じベンダー: Linux

V. CVE-2023-54153へのコメント

まだコメントはありません

コメントを残す