PT-2025-53202 · Ntfs3+2 · Ntfs3+2

Published 2023-07-02 · Updated 2026-04-20 · CVE-2023-54125

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.2.0-rc1+ #4

Description The Linux kernel contains a flaw within the ntfs3 file system related to handling extended attributes. Specifically, the ntfs read ea function does not properly return an error code for inconsistent extended attributes, potentially leading to unpredictable memory access after the function returns. This issue was identified through Kernel Address Sanitizer (KASAN) reporting a use-after-free condition in the ntfs set ea function. The vulnerability can be triggered when setting extended attributes via the setxattr system call, ultimately impacting the path setxattr function.

Recommendations Update to a version of the Linux kernel newer than 6.2.0-rc1+ #4.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-04182

CVE-2023-54125

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Debian

Linux Kernel

Ntfs3

References · 1458

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54125.json · Exploit
• https://osv.dev/vulnerability/SUSE-SU-2026:0315-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54125 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04182 · Security Note
• https://ubuntu.com/security/CVE-2023-54125 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54125 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54125 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-54125 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54125 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54125 · Vendor Advisory