PT-2025-53157 · Linux+1 · Linux Kernel+1

Published 2023-08-22 · Updated 2026-03-24 · CVE-2023-54080

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:A/AC:H/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc6-kts+

Description The Linux kernel contains a flaw within the btrfs zoned mode related to handling pre-allocated writes during relocation. Specifically, the issue arises when a checksum is unavailable for a corresponding region during relocation, leading to an invalid logical value being set in the ordered extent. This can cause the btrfs lookup block group() function to fail, potentially resulting in an assertion or a null pointer dereference. The issue can be reproduced by repeatedly running a specific btrfs test setup.

Recommendations Update to a version newer than 6.5.0-rc6-kts+ to address this issue.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2026-01242

CVE-2023-54080

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Linux Kernel

Btrfs

References · 1456

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54080.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54080 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54080 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54080 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54080 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54080 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54080 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01242 · Security Note