CVE-2023-54167

Source
https://cve.org/CVERecord?id=CVE-2023-54167
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54167.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-54167
Downstream
Published
2025-12-30T12:08:42Z
Modified
2026-08-12T03:51:22Z
Summary
m68k: mm: Move initrd phys_to_virt handling after paging_init()
Details

In the Linux kernel, the following vulnerability has been resolved:

m68k: mm: Move initrd phys_to_virt handling after paging_init()

When booting with an initial ramdisk on platforms where physical memory does not start at address zero (e.g. on Amiga):

initrd: 0ef0602c - 0f800000
Zone ranges:
  DMA      [mem 0x0000000008000000-0x000000f7ffffffff]
  Normal   empty
Movable zone start for each node
Early memory node ranges
  node   0: [mem 0x0000000008000000-0x000000000f7fffff]
Initmem setup node 0 [mem 0x0000000008000000-0x000000000f7fffff]
Unable to handle kernel access at virtual address (ptrval)
Oops: 00000000
Modules linked in:
PC: [<00201d3c>] memcmp+0x28/0x56

As phys_to_virt() relies on m68k_memoffset and module_fixup(), it must not be called before paging_init(). Hence postpone the phys_to_virt handling for the initial ramdisk until after calling paging_init().

While at it, reduce #ifdef clutter by using IS_ENABLED() instead.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54167.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
376e3fdecb0dcae216c0ac559cff066f460bf47b
Fixed
ceb089e2337f810d3594d310953d9af4783f660a
Fixed
58662cfb459150b9c0c22d20cddaea439b3844bd
Fixed
d4b97925e87eb133e400fe4a482d750c74ce392f

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54167.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.17.0
Fixed
6.1.20
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.7

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54167.json"