CVE-2023-54264
Unknown Unknown - Not Provided

Null Pointer Dereference in Linux Kernel sysv Filesystem

Vulnerability report for CVE-2023-54264, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent) return a null ptr and taking lock on that leads to the null-ptr-deref bug.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-07-06
AI Q&A
2025-12-30
EPSS Evaluated
2026-07-05
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a null pointer dereference bug in the Linux kernel's sysv filesystem code. Specifically, the function sb_getblk(inode->i_sb, parent) can return a null pointer, and if the code attempts to take a lock on this null pointer, it leads to a null pointer dereference, which can cause a system crash or instability. The vulnerability has been resolved by adding a null check to prevent this issue.

Impact Analysis

If exploited, this vulnerability can cause the Linux kernel to dereference a null pointer, potentially leading to a system crash or denial of service. This can result in system instability or downtime.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54264. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart