CVE-2023-54264
Unknown Unknown - Not Provided
Null Pointer Dereference in Linux Kernel sysv Filesystem

Publication date: 2025-12-30

Last updated on: 2025-12-30

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: fs/sysv: Null check to prevent null-ptr-deref bug sb_getblk(inode->i_sb, parent) return a null ptr and taking lock on that leads to the null-ptr-deref bug.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-30
Last Modified
2025-12-30
Generated
2026-06-16
AI Q&A
2025-12-30
EPSS Evaluated
2026-06-15
NVD
CVE-2023-54264
EUVD
EUVD-2023-60377
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a null pointer dereference bug in the Linux kernel's sysv filesystem code. Specifically, the function sb_getblk(inode->i_sb, parent) can return a null pointer, and if the code attempts to take a lock on this null pointer, it leads to a null pointer dereference, which can cause a system crash or instability. The vulnerability has been resolved by adding a null check to prevent this issue.

Impact Analysis

If exploited, this vulnerability can cause the Linux kernel to dereference a null pointer, potentially leading to a system crash or denial of service. This can result in system instability or downtime.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2023-54264. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart