PT-2025-53060 · Linux+1 · Linux Kernel+1

Published 2023-05-13 · Updated 2025-12-26 · CVE-2023-54062

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s ext4 file system related to extended attribute handling. Specifically, the ext4 xattr move to block() function contains an issue where memory could be improperly freed or leaked. This occurs because the code attempts to free or not free a memory region based on an invalid pointer after the memory region has been moved. The function ext4 xattr move to block() is affected. The issue arises when handling extended attributes allocated via kvmalloc().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Allocation of Resources Without Limits

Improper Resource Release

Resource Exhaustion

Weakness Enumeration

CWE-770

CWE-404

CWE-400

Related Identifiers

BDU:2026-01246

CVE-2023-54062

RHSA-2024:2394

Affected Products

Linux Kernel

Ext4

References · 33

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54062.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54062 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01246 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54062 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54062 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54062 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54062 · Security Note
• https://ubuntu.com/security/CVE-2023-54062 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54062 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54062 · Security Note
• https://docs.bell-sw.com/security/cves/CVE-2023-54062 · Note
• https://git.kernel.org/stable/c/ba04d6af5ac440a6d5a2d35dc1d8e2cb0323550a · Note
• https://git.kernel.org/stable/c/76887be2a96193cd11be818551b8934ecdb3123f · Note
• https://git.kernel.org/stable/c/1a8822343e67432b658145d2760a524c884da9d4 · Note
• https://git.kernel.org/stable/c/b87c7cdf2bed4928b899e1ce91ef0d147017ba45 · Note