Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2023-54063: Linux kernel NTFS3 driver may read beyond memory
CVE-2023-54063 · published 10 months ago
Summary
The NTFS3 file‑system driver in the Linux kernel could accidentally read data from the wrong place in memory when handling certain index operations. This could lead to system instability or crashes. Updating the kernel to the latest version that includes the added safety check resolves the issue.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1041.46~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1045.52~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1039.47~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-79.86~20.04.2.
- Update canonical linux-ibm-5.15 to version 5.15.0-1036.39~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1037.42~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-79.88~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1016.16~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1040.46~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1038.42~20.04.2.
- Update canonical linux to version 5.15.0-79.86.
- Update canonical linux-aws to version 5.15.0-1042.47.
- Update canonical linux-azure to version 5.15.0-1045.52.
- Update canonical linux-gcp to version 5.15.0-1039.47.
- Update canonical linux-gke to version 5.15.0-1039.44.
- Update canonical linux-gkeop to version 5.15.0-1025.30.
- Update canonical linux-ibm to version 5.15.0-1035.38.
- Update canonical linux-intel-iotg to version 5.15.0-1037.42.
- Update canonical linux-kvm to version 5.15.0-1039.44.
- Update canonical linux-lowlatency to version 5.15.0-79.88.
- Update canonical linux-nvidia to version 5.15.0-1030.30.
- Update canonical linux-nvidia-tegra to version 5.15.0-1016.16.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1002.2.
- Update canonical linux-oracle to version 5.15.0-1040.46.
- Update canonical linux-raspi to version 5.15.0-1035.38.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1025.29.
- Update canonical linux-bluefield to version 5.15.0-1022.24.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1036.38.
- Update canonical linux-realtime to version 5.15.0-1043.48.
- Update debian linux to version 6.1.37-1.
- Update debian linux to version 6.3.7-1.
- Update canonical linux-azure-fde to version 5.15.0-1045.52.1.
- Update linux linux to version cd7e1d67924081717c5c96ead758a1a77867689a or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux |
< cd7e1d67924081717c5c96ead758a1a77867689a 5.15 |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1041.46~20.04.1 Fix: upgrade to 5.15.0-1041.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1045.52~20.04.1 Fix: upgrade to 5.15.0-1045.52~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1039.47~20.04.1 Fix: upgrade to 5.15.0-1039.47~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-79.86~20.04.2 Fix: upgrade to 5.15.0-79.86~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1036.39~20.04.1 Fix: upgrade to 5.15.0-1036.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1037.42~20.04.1 Fix: upgrade to 5.15.0-1037.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-79.88~20.04.1 Fix: upgrade to 5.15.0-79.88~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1016.16~20.04.1 Fix: upgrade to 5.15.0-1016.16~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1040.46~20.04.1 Fix: upgrade to 5.15.0-1040.46~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1038.42~20.04.2 Fix: upgrade to 5.15.0-1038.42~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
Showing 50 of 119. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-79.86 Fix: upgrade to 5.15.0-79.86
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1042.47 Fix: upgrade to 5.15.0-1042.47
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1045.52 Fix: upgrade to 5.15.0-1045.52
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1039.47 Fix: upgrade to 5.15.0-1039.47
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1039.44 Fix: upgrade to 5.15.0-1039.44
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1025.30 Fix: upgrade to 5.15.0-1025.30
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1035.38 Fix: upgrade to 5.15.0-1035.38
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1037.42 Fix: upgrade to 5.15.0-1037.42
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1039.44 Fix: upgrade to 5.15.0-1039.44
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-79.88 Fix: upgrade to 5.15.0-79.88
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1030.30 Fix: upgrade to 5.15.0-1030.30
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1016.16 Fix: upgrade to 5.15.0-1016.16
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1002.2 Fix: upgrade to 5.15.0-1002.2
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1040.46 Fix: upgrade to 5.15.0-1040.46
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1035.38 Fix: upgrade to 5.15.0-1035.38
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1025.29 Fix: upgrade to 5.15.0-1025.29
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1022.24 Fix: upgrade to 5.15.0-1022.24
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1036.38 Fix: upgrade to 5.15.0-1036.38
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1043.48 Fix: upgrade to 5.15.0-1043.48
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Debian:12 | debian | linux |
< 6.1.37-1 Fix: upgrade to 6.1.37-1
|
| Debian:13 | debian | linux |
< 6.3.7-1 Fix: upgrade to 6.3.7-1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1045.52.1 Fix: upgrade to 5.15.0-1045.52.1
|
Original advisory text
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix OOB read in indx_insert_into_buffer Syzbot reported a OOB read bug: BUG: KASAN: slab-out-of-bounds in indx_inser...
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix OOB read in indx_insert_into_buffer Syzbot reported a OOB read bug: BUG: KASAN: slab-out-of-bounds in indx_insert_into_buffer+0xaa3/0x13b0 fs/ntfs3/index.c:1755 Read of size 17168 at addr ffff8880255e06c0 by task syz-executor308/3630 Call Trace: <TASK> memmove+0x25/0x60 mm/kasan/shadow.c:54 indx_insert_into_buffer+0xaa3/0x13b0 fs/ntfs3/index.c:1755 indx_insert_entry+0x446/0x6b0 fs/ntfs3/index.c:1863 ntfs_create_inode+0x1d3f/0x35c0 fs/ntfs3/inode.c:1548 ntfs_create+0x3e/0x60 fs/ntfs3/namei.c:100 lookup_open fs/namei.c:3413 [inline] If the member struct INDEX_BUFFER *index of struct indx_node is incorrect, that is, the value of __le32 used is greater than the value of __le32 total in struct INDEX_HDR. Therefore, OOB read occurs when memmove is called in indx_insert_into_buffer(). Fix this by adding a check in hdr_find_e().
References
- https://git.kernel.org/stable/c/4bf3b564e27a518f158a83d5e1a50064ed6136a0 Third Party Advisory
- https://git.kernel.org/stable/c/a7e5dba10ba1402dd6c2f961a70320770865c4a5 Third Party Advisory
- https://git.kernel.org/stable/c/b8c44949044e5f7f864525fdffe8e95135ce9ce5 Third Party Advisory
- https://git.kernel.org/stable/c/cd7e1d67924081717c5c96ead758a1a77867689a Third Party Advisory
- https://git.kernel.org/stable/c/17048287ac79abd33b275ac3b5738285d406481b Third Party Advisory
- https://ubuntu.com/security/CVE-2023-54063 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-54063 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-54063 Vendor Advisory
Severity
8.3
High
Timeline
Published24 Dec 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2023-54063 · NVD
CVE-2023-54063 · MITRE
UBUNTU-CVE-2023-54063 · OSV
DEBIAN-CVE-2023-54063 · OSV
Track software like this
Free during beta