« Volver al listado

CVE-2023-54272

Estado: AplazadaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()

In a previous commit c1006bd13146, ni->mi.mrec in ni_write_inode() could be NULL, and thus a NULL check is added for this variable.

However, in the same call stack, ni->mi.mrec can be also dereferenced in ni_clear():

Thus, a possible null-pointer dereference may exist in ni_clear(). To fix it, a NULL check is added in this function.

Detalles técnicos trazas, registros y código del informe original
ntfs_evict_inode(inode)
  ni_write_inode(inode, ...)
    ni = ntfs_i(inode);
    is_rec_inuse(ni->mi.mrec) -> Add a NULL check by previous commit
  ni_clear(ntfs_i(inode))
    is_rec_inuse(ni->mi.mrec) -> No check

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54272",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4342306f0f0d5ff4315a204d315c1b51b914fca5",
              "lessThan": "20f9bfc664d6a478f9a5bbc0c380f80f7a1a06c6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4342306f0f0d5ff4315a204d315c1b51b914fca5",
              "lessThan": "39c6312009574ca73865354133ca222e7753a71b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4342306f0f0d5ff4315a204d315c1b51b914fca5",
              "lessThan": "e7675f85a92233136c630000a0b7cf97826705da",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4342306f0f0d5ff4315a204d315c1b51b914fca5",
              "lessThan": "ec275bf9693d19cc0fdce8436f4c425ced86f6e7",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "fs/ntfs3/frecord.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.15"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.15",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.15.113",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.81",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.3.4",
              "versionType": "semver",
              "lessThanOrEqual": "6.3.*"
            },
            {
              "status": "unaffected",
              "version": "6.4",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "fs/ntfs3/frecord.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-30T13:16:16.110",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/20f9bfc664d6a478f9a5bbc0c380f80f7a1a06c6",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/39c6312009574ca73865354133ca222e7753a71b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e7675f85a92233136c630000a0b7cf97826705da",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ec275bf9693d19cc0fdce8436f4c425ced86f6e7",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/ntfs3: Fix a possible null-pointer dereference in ni_clear()\n\nIn a previous commit c1006bd13146, ni->mi.mrec in ni_write_inode()\ncould be NULL, and thus a NULL check is added for this variable.\n\nHowever, in the same call stack, ni->mi.mrec can be also dereferenced\nin ni_clear():\n\nntfs_evict_inode(inode)\n  ni_write_inode(inode, ...)\n    ni = ntfs_i(inode);\n    is_rec_inuse(ni->mi.mrec) -> Add a NULL check by previous commit\n  ni_clear(ntfs_i(inode))\n    is_rec_inuse(ni->mi.mrec) -> No check\n\nThus, a possible null-pointer dereference may exist in ni_clear().\nTo fix it, a NULL check is added in this function."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nfs/ntfs3: Corregir una posible desreferencia de puntero nulo en ni_clear()\n\nEn un commit anterior c1006bd13146, ni->mi.mrec en ni_write_inode() podría ser NULL, y por lo tanto se añade una comprobación de NULL para esta variable.\n\nSin embargo, en la misma pila de llamadas, ni->mi.mrec también puede ser desreferenciado en ni_clear():\n\nntfs_evict_inode(inode)\n  ni_write_inode(inode, ...)\n    ni = ntfs_i(inode);\n    is_rec_inuse(ni->mi.mrec) -> Se añade una comprobación de NULL por el commit anterior\n  ni_clear(ntfs_i(inode))\n    is_rec_inuse(ni->mi.mrec) -> Sin comprobación\n\nPor lo tanto, una posible desreferencia de puntero nulo puede existir en ni_clear().\nPara corregirlo, se añade una comprobación de NULL en esta función."
    }
  ],
  "lastModified": "2026-06-17T06:47:08.103",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}