PT-2025-54107 · Linux+1 · Linux Kernel+1

Published 2023-07-27 · Updated 2026-03-24 · CVE-2023-54278

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:L/AC:H/Au:S/C:P/I:P/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc3-09759-gc5666c912155

Description The Linux kernel contains an issue within the s390/vmem subsystem. A flaw exists where the kernel crashes during boot when debug pagealloc is enabled, specifically after commit bb1520d581a3 ("s390/mm: start kernel with DAT enabled"). This occurs due to the use of large mappings on machines with EDAT1/EDAT2. The fix involves splitting the mappings into 4k pages when debug pagealloc is enabled via CONFIG DEBUG PAGEALLOC ENABLE DEFAULT or the debug pagealloc kernel command line option.

Recommendations Update to Linux kernel version 6.5.0-rc3-09759-gc5666c912155 or a later version that includes the fix.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2026-02064

CVE-2023-54278

RHSA-2025:6966

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Linux Kernel

Red Hat

References · 1460

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54278.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54278 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-54278 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54278 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54278 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0315-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54278 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2023-54278 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54278 · Vendor Advisory