« Volver al listado

CVE-2023-54317

Estado: AplazadaAlta (7.8)—

In the Linux kernel, the following vulnerability has been resolved:

dm flakey: don't corrupt the zero page

When we need to zero some range on a block device, the function __blkdev_issue_zero_pages submits a write bio with the bio vector pointing to the zero page. If we use dm-flakey with corrupt bio writes option, it will corrupt the content of the zero page which results in crashes of various userspace programs. Glibc assumes that memory returned by mmap is zeroed and it uses it for calloc implementation; if the newly mapped memory is not zeroed, calloc will return non-zeroed memory.

Fix this bug by testing if the page is equal to ZERO_PAGE(0) and avoiding the corruption in this case.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vulnerabilidad local (AV:L, PR:L) que permite a un atacante con privilegios locales corromper memoria del kernel mediante dm-flakey, causando denegación de servicio y corrupción de datos en aplicaciones de usuario.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramRestrict File and Directory PermissionsRemote Data StorageFilter Network TrafficExecution PreventionEncrypt Sensitive Information

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-54317",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "c6cd92fcabd6cc78bb1808c6a18245c842722fc1",
              "lessThan": "b7f8892f672222dbfcc721f51edc03963212b249",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "d4c637af2e56ee1ec66ee34d0ac5a13c75911aec",
              "lessThan": "98e311be44dbe31ad9c42aa067b2359bac451fda",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a00f5276e26636cbf72f24f79831026d2e2868e7",
              "lessThan": "3c4a56ef7c538d16c1738ba0ccea9e7146105b5a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a00f5276e26636cbf72f24f79831026d2e2868e7",
              "lessThan": "f2b478228bfdd11e358c5bc197561331f5d5c394",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a00f5276e26636cbf72f24f79831026d2e2868e7",
              "lessThan": "ff60b2bb680ebcaf8890814dd51084a022891469",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a00f5276e26636cbf72f24f79831026d2e2868e7",
              "lessThan": "be360c83f2d810493c04f999d69ec9152981e0c0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a00f5276e26636cbf72f24f79831026d2e2868e7",
              "lessThan": "63d31617883d64b43b0e2d529f0751f40713ecae",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a00f5276e26636cbf72f24f79831026d2e2868e7",
              "lessThan": "f50714b57aecb6b3dc81d578e295f86d9c73f078",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1ed7c9f45fb893877ffa7cedd7aa61beaadbb328",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "4.14.158",
              "lessThan": "4.14.308",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "4.19.88",
              "lessThan": "4.19.276",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "4.9.206",
              "lessThan": "4.10",
              "versionType": "semver"
            }
          ],
          "programFiles": [
            "drivers/md/dm-flakey.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.0"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.0",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "4.14.308",
              "versionType": "semver",
              "lessThanOrEqual": "4.14.*"
            },
            {
              "status": "unaffected",
              "version": "4.19.276",
              "versionType": "semver",
              "lessThanOrEqual": "4.19.*"
            },
            {
              "status": "unaffected",
              "version": "5.4.235",
              "versionType": "semver",
              "lessThanOrEqual": "5.4.*"
            },
            {
              "status": "unaffected",
              "version": "5.10.173",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.99",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.16",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.2.3",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.*"
            },
            {
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/md/dm-flakey.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-30T13:16:20.973",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/3c4a56ef7c538d16c1738ba0ccea9e7146105b5a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/63d31617883d64b43b0e2d529f0751f40713ecae",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/98e311be44dbe31ad9c42aa067b2359bac451fda",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/b7f8892f672222dbfcc721f51edc03963212b249",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/be360c83f2d810493c04f999d69ec9152981e0c0",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f2b478228bfdd11e358c5bc197561331f5d5c394",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/f50714b57aecb6b3dc81d578e295f86d9c73f078",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/ff60b2bb680ebcaf8890814dd51084a022891469",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm flakey: don't corrupt the zero page\n\nWhen we need to zero some range on a block device, the function\n__blkdev_issue_zero_pages submits a write bio with the bio vector pointing\nto the zero page. If we use dm-flakey with corrupt bio writes option, it\nwill corrupt the content of the zero page which results in crashes of\nvarious userspace programs. Glibc assumes that memory returned by mmap is\nzeroed and it uses it for calloc implementation; if the newly mapped\nmemory is not zeroed, calloc will return non-zeroed memory.\n\nFix this bug by testing if the page is equal to ZERO_PAGE(0) and\navoiding the corruption in this case."
    },
    {
      "lang": "es",
      "value": "En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta:\n\ndm flakey: no corromper la página cero\n\nCuando necesitamos poner a cero un rango en un dispositivo de bloques, la función __blkdev_issue_zero_pages envía un bio de escritura con el vector bio apuntando a la página cero. Si usamos dm-flakey con la opción de escrituras bio corruptas, corromperá el contenido de la página cero, lo que resulta en fallos de varios programas de espacio de usuario. Glibc asume que la memoria devuelta por mmap está puesta a cero y la usa para la implementación de calloc; si la memoria recién mapeada no está puesta a cero, calloc devolverá memoria no puesta a cero.\n\nSoluciona este error probando si la página es igual a ZERO_PAGE(0) y evitando la corrupción en este caso."
    }
  ],
  "lastModified": "2026-08-04T11:16:40.117",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}