{"id":"CVE-2023-54062","revision":"c455a19ca3d54f3db0ced95865314af2","records":[{"revision":"c455a19ca3d54f3db0ced95865314af2","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2023-54062","aliases":[],"title":"ext4: fix invalid free tracking in ext4_xattr_move_to_block()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix invalid free tracking in ext4_xattr_move_to_block()\n\nIn ext4_xattr_move_to_block(), the value of the extended attribute\nwhich we need to move to an external block may be allocated by\nkvmalloc() if the value is stored in an external inode.  So at the end\nof the function the code tried to check if this was the case by\ntesting entry->e_value_inum.\n\nHowever, at this point, the pointer to the xattr entry is no longer\nvalid, because it was removed from the original location where it had\nbeen stored.  So we could end up calling kvfree() on a pointer which\nwas not allocated by kvmalloc(); or we could also potentially leak\nmemory by not freeing the buffer when it should be freed.  Fix this by\nstoring whether it should be freed in a separate variable.","state":0,"publishedAt":"2025-12-24T12:23:08.649+00:00","modifiedAt":"2026-10-15T21:41:38.822+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/xattr.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"c7851208abffe5ae4deb01cf48763911dc14fc67\",\n                            \"lessThan\": \"76887be2a96193cd11be818551b8934ecdb3123f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f5cdc6a7339f250d44d4d469ed7a474ac0d6c7a7\",\n                            \"lessThan\": \"f30f3391d089dc91aef91d08f4b04a6c0df2b067\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"3b28c799a1334adb5a19f42f03abe0d8cbb05938\",\n                            \"lessThan\": \"ba04d6af5ac440a6d5a2d35dc1d8e2cb0323550a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d738789ae9ec47d3458a008788f3cdc862ebf0cb\",\n                            \"lessThan\": \"1a8822343e67432b658145d2760a524c884da9d4\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"a6744e14ce7045ab1a728bde9595f62fbd39f1d2\",\n                            \"lessThan\": \"8beaa3cb293a8f7bacf711cf52201d59859dbc40\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8b6d06b3be7648b3b0f428558293ddf6e2cb94bf\",\n                            \"lessThan\": \"c5fa4eedddd1c8342ce533cb401c0e693e55b4e3\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"d2efaf8c870c7067b8d1779773134f3481cd8f68\",\n                            \"lessThan\": \"a18670395e5f28acddeca037c5e4bd2ea961b70a\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1e9d62d252812575ded7c620d8fc67c32ff06c16\",\n                            \"lessThan\": \"b2fab1807d26acd1c6115b95b5eddd697d84751b\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"1e9d62d252812575ded7c620d8fc67c32ff06c16\",\n                            \"lessThan\": \"b87c7cdf2bed4928b899e1ce91ef0d147017ba45\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"4.14.308\",\n                            \"lessThan\": \"4.14.315\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.276\",\n                            \"lessThan\": \"4.19.283\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.235\",\n                            \"lessThan\": \"5.4.243\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.173\",\n                            \"lessThan\": \"5.10.180\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.99\",\n                            \"lessThan\": \"5.15.112\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.16\",\n                            \"lessThan\": \"6.1.29\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.3\",\n                            \"lessThan\": \"6.2.16\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/ext4/xattr.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.3\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.14.315\",\n                            \"lessThanOrEqual\": \"4.14.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"4.19.283\",\n                            \"lessThanOrEqual\": \"4.19.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.4.243\",\n                            \"lessThanOrEqual\": \"5.4.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.180\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.112\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.29\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.2.16\",\n                            \"lessThanOrEqual\": \"6.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.3.3\",\n                            \"lessThanOrEqual\": \"6.3.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.4\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","score":7.8,"severity":"HIGH"}],"references":["https://git.kernel.org/stable/c/76887be2a96193cd11be818551b8934ecdb3123f","https://git.kernel.org/stable/c/f30f3391d089dc91aef91d08f4b04a6c0df2b067","https://git.kernel.org/stable/c/ba04d6af5ac440a6d5a2d35dc1d8e2cb0323550a","https://git.kernel.org/stable/c/1a8822343e67432b658145d2760a524c884da9d4","https://git.kernel.org/stable/c/8beaa3cb293a8f7bacf711cf52201d59859dbc40","https://git.kernel.org/stable/c/c5fa4eedddd1c8342ce533cb401c0e693e55b4e3","https://git.kernel.org/stable/c/a18670395e5f28acddeca037c5e4bd2ea961b70a","https://git.kernel.org/stable/c/b2fab1807d26acd1c6115b95b5eddd697d84751b","https://git.kernel.org/stable/c/b87c7cdf2bed4928b899e1ce91ef0d147017ba45"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-54062","license":"CVE Program Terms of Use","key":"cve-program:CVE-2023-54062","identifiers":["CVE-2023-54062"]},"retained":false,"historicalAffected":[]}],"coverage":[]}