CVE-2023-54297
In the Linux kernel, the following vulnerability has been resolved:
btrfs: zoned: fix memory leak after finding block group with super blocks
At exclude_super_stripes(), if we happen to find a block group that has super blocks mapped to it and we are on a zoned filesystem, we error out as this is not supposed to happen, indicating either a bug or maybe some memory corruption for example. However we are exiting the function without freeing the memory allocated for the logical address of the super blocks. Fix this by freeing the logical address.
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-54297",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "12659251ca5df05a484eb122c2c34c18d84e797c",
"lessThan": "ab80a901f8daca07c4a54af0ab0de745c9918294",
"versionType": "git"
},
{
"status": "affected",
"version": "12659251ca5df05a484eb122c2c34c18d84e797c",
"lessThan": "c35ea606196243063e63785918c7c8fe27c45798",
"versionType": "git"
},
{
"status": "affected",
"version": "12659251ca5df05a484eb122c2c34c18d84e797c",
"lessThan": "cca627afb463a4b47721eac017516ba200de85c3",
"versionType": "git"
},
{
"status": "affected",
"version": "12659251ca5df05a484eb122c2c34c18d84e797c",
"lessThan": "f1a07c2b4e2c473ec322b8b9ece071b8c88a3512",
"versionType": "git"
}
],
"programFiles": [
"fs/btrfs/block-group.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.11"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.11",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.15.123",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.42",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.4.7",
"versionType": "semver",
"lessThanOrEqual": "6.4.*"
},
{
"status": "unaffected",
"version": "6.5",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/btrfs/block-group.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-30T13:16:18.800",
"references": [
{
"url": "https://git.kernel.org/stable/c/ab80a901f8daca07c4a54af0ab0de745c9918294",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/c35ea606196243063e63785918c7c8fe27c45798",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/cca627afb463a4b47721eac017516ba200de85c3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/f1a07c2b4e2c473ec322b8b9ece071b8c88a3512",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: zoned: fix memory leak after finding block group with super blocks\n\nAt exclude_super_stripes(), if we happen to find a block group that has\nsuper blocks mapped to it and we are on a zoned filesystem, we error out\nas this is not supposed to happen, indicating either a bug or maybe some\nmemory corruption for example. However we are exiting the function without\nfreeing the memory allocated for the logical address of the super blocks.\nFix this by freeing the logical address."
},
{
"lang": "es",
"value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\nbtrfs: con zonas: corregir fuga de memoria después de encontrar grupo de bloques con superbloques\n\nEn exclude_super_stripes(), si encontramos un grupo de bloques que tiene superbloques mapeados y estamos en un sistema de archivos con zonas, salimos con error ya que esto no debería ocurrir, indicando un error o quizás alguna corrupción de memoria, por ejemplo. Sin embargo, estamos saliendo de la función sin liberar la memoria asignada para la dirección lógica de los superbloques. Corregir esto liberando la dirección lógica."
}
],
"lastModified": "2026-06-17T06:47:10.727",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}