PT-2025-54082 · Linux+2 · Linux Kernel+2

Published 2023-01-01 · Updated 2026-05-26 · CVE-2023-54253

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:L/AC:L/Au:M/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3+ #1

Description A flaw exists in the Linux kernel's btrfs subsystem related to the order of operations when handling page extent mapping during file relocation. Specifically, the set page extent mapped function was being called before the btrfs read folio function in certain scenarios, leading to a potential assertion failure and kernel panic. This issue is similar to a previously identified problem and the fix involves moving the set page extent mapped call to after the btrfs read folio block to ensure proper subpage blocksize setup before use.

Recommendations Update to a version of the Linux kernel newer than 6.5.0-rc3+ #1.

Exploit

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

BDU:2026-01319

CVE-2023-54253

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Debian

Linux Kernel

Btrfs

References · 1462

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54253.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54253 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54253 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0315-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01319 · Security Note
• https://ubuntu.com/security/CVE-2023-54253 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-54253 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54253 · Vendor Advisory