PT-2025-53154 · Linux+1 · Linux Kernel+1

Published 2023-03-27 · Updated 2025-12-25 · CVE-2023-54077

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a memory leak in the ntfs3 filesystem when the ntfs read mft function fails under specific conditions. The issue arises from inconsistencies in setting flags related to directory attributes during the processing of MFT (Master File Table) entries. Specifically, the ATTR ROOT label sets is root to true and NI FLAG DIR, but these states are not always consistent. This can lead to a memory leak because the cleanup function ni clear() frees the wrong memory allocation (ni->file.run instead of ni->dir.alloc run) when NI FLAG DIR is not set. The backtrace indicates the leak occurs during the allocation of memory for directory entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2026-01135

CVE-2023-54077

Affected Products

Linux Kernel

Ntfs3

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54077.json · Exploit
• https://ubuntu.com/security/CVE-2023-54077 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54077 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54077 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54077 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54077 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54077 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54077 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01135 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-54077 · Security Note
• https://git.kernel.org/stable/c/93bf79f989688852deade1550fb478b0a4d8daa8 · Note
• https://kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.2.15 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://git.kernel.org/stable/c/1bc6bb657dfb0ab3b94ef6d477ca241bf7b6ec06 · Note
• https://git.kernel.org/stable/c/3030f2b9b3329db3948c1a145a5493ca6f617d50 · Note