PT-2025-54143 · Linux+1 · Linux Kernel+1

Published 2023-07-18 · Updated 2026-03-24 · CVE-2023-54297

Positive Technologies (AI Summary)

CVSS v2.0

7.7

High

Base vector

AV:A/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak exists in the btrfs zoned block group handling within the Linux kernel. Specifically, the exclude super stripes() function fails to free allocated memory for the logical address of super blocks when encountering a block group with mapped super blocks on a zoned filesystem. This occurs when the system detects an unexpected condition, potentially indicating a bug or memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Leak

Buffer Overflow

Weakness Enumeration

CWE-401

CWE-119

Related Identifiers

BDU:2026-04172

CVE-2023-54297

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Linux Kernel

Btrfs

References · 1463

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54297.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-54297 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54297 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-54297 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-54297 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54297 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-54297 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04172 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54297 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-54297 · Vendor Advisory