CVE-2023-53301
- Source
- https://cve.org/CVERecord?id=CVE-2023-53301
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53301.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2023-53301
- Downstream
- Published
- 2025-09-16T08:11:32Z
- Modified
- 2026-08-12T03:51:18Z
- Summary
- f2fs: fix kernel crash due to null io->bio
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix kernel crash due to null io->bio
We should return when io->bio is null before doing anything. Otherwise, panic.
BUG: kernel NULL pointer dereference, address: 0000000000000010 RIP: 0010:__submit_merged_write_cond+0x164/0x240 [f2fs] Call Trace: f2fs_submit_merged_write+0x1d/0x30 [f2fs] commit_checkpoint+0x110/0x1e0 [f2fs] f2fs_write_checkpoint+0x9f7/0xf00 [f2fs] ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] __checkpoint_and_complete_reqs+0x84/0x190 [f2fs] ? preempt_count_add+0x82/0xc0 ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] issue_checkpoint_thread+0x4c/0xf0 [f2fs] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xff/0x130 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2c/0x50
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53301.json" }- References
-
- https://git.kernel.org/stable/c/267c159f9c7bcb7009dae16889b880c5ed8759a8
- https://git.kernel.org/stable/c/83dbb9a1bd5ef2eea73275906fc50b2fdda39cd5
- https://git.kernel.org/stable/c/eb52f13c6093ac761dbeaa459c810fc0253209fc
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53301.json
- https://nvd.nist.gov/vuln/detail/CVE-2023-53301
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git