Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Linux kernel NTFS driver may cause memory error

CVE-2023-54125 · published 9 months ago
Summary

The NTFS file system support in the Linux kernel could fail to report a problem when extended attributes are inconsistent, leading to unintended memory access. This can cause system instability or crashes when accessing NTFS volumes. Update the Linux kernel packages for Debian and Canonical distributions to the latest version that includes the fix.

What to do
  • Update debian rootio-linux to version 6.1.159-1.root.io.75.
  • Update debian linux to version 6.1.176-1.
  • Update debian linux to version 6.4.13-1.
  • Update bellsoft linux-lts to version 6.6.58-r0.
  • Update linux kernel to version 6.4.12.
  • Update debian linux-6.1 to version 6.1.176-1~deb11u1.
  • Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
  • Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
  • Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
  • Update canonical linux to version 5.15.0-187.197.aikido.112.
  • Update canonical rootio-linux to version 5.15.0-187.197.aikido.112.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update canonical linux-aws-5.15 to version 5.15.0-1117.124~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1123.132~20.04.1.
  • Update canonical linux-azure-fde-5.15 to version 5.15.0-1122.131~20.04.1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
  • Update canonical linux-hwe-5.15 to version 5.15.0-198.208~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1111.115~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1112.118~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-195.205~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
  • Update canonical linux to version 5.15.0-198.208.
  • Update canonical linux-aws to version 5.15.0-1117.124.
  • Update canonical linux-azure to version 5.15.0-1123.132.
  • Update canonical linux-azure-fde to version 5.15.0-1122.131.
  • Update canonical linux-gcp to version 5.15.0-1118.128.
  • Update canonical linux-gke to version 5.15.0-1113.119.
  • Update canonical linux-gkeop to version 5.15.0-1100.108.
  • Update canonical linux-ibm to version 5.15.0-1111.115.
  • Update canonical linux-intel-iotg to version 5.15.0-1112.118.
  • Update canonical linux-kvm to version 5.15.0-1109.114.
  • Update canonical linux-lowlatency to version 5.15.0-195.205.
  • Update canonical linux-nvidia to version 5.15.0-1112.113.
  • Update canonical linux-oracle to version 5.15.0-1114.120.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1080.84.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1109.111.
  • Update canonical linux-realtime to version 5.15.0-1116.125.
  • Update canonical linux-aws-fips to version 5.15.0-1117.124+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1123.132+fips1.
  • Update canonical linux-fips to version 5.15.0-198.208+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1118.128+fips1.
  • Update linux linux to version 6557c4504c5a1bbbbac25d14d7dcf2a4912d1508 or later.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:12 debian rootio-linux < 6.1.159-1.root.io.75
Fix: upgrade to 6.1.159-1.root.io.75
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-raspi All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1080.84
Fix: upgrade to 5.15.0-1080.84
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1117.124+fips1
Fix: upgrade to 5.15.0-1117.124+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1123.132+fips1
Fix: upgrade to 5.15.0-1123.132+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-198.208+fips1
Fix: upgrade to 5.15.0-198.208+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1118.128+fips1
Fix: upgrade to 5.15.0-1118.128+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1109.111
Fix: upgrade to 5.15.0-1109.111
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1116.125
Fix: upgrade to 5.15.0-1116.125
Debian:12 debian linux < 6.1.176-1
Fix: upgrade to 6.1.176-1
Debian:13 debian linux < 6.4.13-1
Fix: upgrade to 6.4.13-1
Debian:14 debian linux < 6.4.13-1
Fix: upgrade to 6.4.13-1
– linux linux < 6557c4504c5a1bbbbac25d14d7dcf2a4912d1508
6.2
Alpaquita:23 bellsoft linux-lts >= 6.1.170-r0
Alpaquita:stream bellsoft linux-lts >= 6.1.112-r0, < 6.6.58-r0
Fix: upgrade to 6.6.58-r0
Linux linux kernel >= 6.2.0, < 6.4.12
Fix: upgrade to 6.4.12
Debian:11 debian linux-6.1 < 6.1.176-1~deb11u1
Fix: upgrade to 6.1.176-1~deb11u1
Ubuntu:Pro:14.04:LTS canonical linux All versions
Ubuntu:Pro:14.04:LTS canonical linux-aws All versions
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:14.04:LTS canonical linux-lts-xenial All versions
Ubuntu:Pro:16.04:LTS canonical linux All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:FIPS:16.04:LTS canonical linux-fips All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Showing 50 of 194. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:20.04:LTS canonical linux All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1117.124~20.04.1
Fix: upgrade to 5.15.0-1117.124~20.04.1
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1123.132~20.04.1
Fix: upgrade to 5.15.0-1123.132~20.04.1
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 < 5.15.0-1122.131~20.04.1
Fix: upgrade to 5.15.0-1122.131~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1118.128~20.04.1
Fix: upgrade to 5.15.0-1118.128~20.04.1
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-198.208~20.04.1
Fix: upgrade to 5.15.0-198.208~20.04.1
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1111.115~20.04.1
Fix: upgrade to 5.15.0-1111.115~20.04.1
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1112.118~20.04.1
Fix: upgrade to 5.15.0-1112.118~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-195.205~20.04.1
Fix: upgrade to 5.15.0-195.205~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1114.120~20.04.1
Fix: upgrade to 5.15.0-1114.120~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-198.208
Fix: upgrade to 5.15.0-198.208
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1117.124
Fix: upgrade to 5.15.0-1117.124
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1123.132
Fix: upgrade to 5.15.0-1123.132
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1122.131
Fix: upgrade to 5.15.0-1122.131
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1118.128
Fix: upgrade to 5.15.0-1118.128
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1113.119
Fix: upgrade to 5.15.0-1113.119
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1100.108
Fix: upgrade to 5.15.0-1100.108
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1111.115
Fix: upgrade to 5.15.0-1111.115
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1112.118
Fix: upgrade to 5.15.0-1112.118
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1109.114
Fix: upgrade to 5.15.0-1109.114
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-195.205
Fix: upgrade to 5.15.0-195.205
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1112.113
Fix: upgrade to 5.15.0-1112.113
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1114.120
Fix: upgrade to 5.15.0-1114.120
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-185.195.root.io.101
< 5.15.0-186.196.root.io.103
< 5.15.0-186.196.aikido.104
< 5.15.0-187.197.aikido.112
Fix: upgrade to 5.15.0-185.195.root.io.101
Root:Ubuntu:22.04 canonical linux < 5.15.0-187.197.aikido.112
Fix: upgrade to 5.15.0-187.197.aikido.112
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Original advisory text
CVE-2023-54125 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Return error for inconsistent extended attributes ntfs_read_ea is called when we want to read extended attributes. There are some sanity checks for the validity of the EAs. However, it fails to return a proper error code for the inconsistent attributes, which might lead to unpredicted memory accesses after return. [ 138.916927] BUG: KASAN: use-after-free in ntfs_set_ea+0x453/0xbf0 [ 138.923876] Write of size 4 at addr ffff88800205cfac by task poc/199 [ 138.931132] [ 138.933016] CPU: 0 PID: 199 Comm: poc Not tainted 6.2.0-rc1+ #4 [ 138.938070] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 [ 138.947327] Call Trace: [ 138.949557] <TASK> [ 138.951539] dump_stack_lvl+0x4d/0x67 [ 138.956834] print_report+0x16f/0x4a6 [ 138.960798] ? ntfs_set_ea+0x453/0xbf0 [ 138.964437] ? kasan_complete_mode_report_info+0x7d/0x200 [ 138.969793] ? ntfs_set_ea+0x453/0xbf0 [ 138.973523] kasan_report+0xb8/0x140 [ 138.976740] ? ntfs_set_ea+0x453/0xbf0 [ 138.980578] __asan_store4+0x76/0xa0 [ 138.984669] ntfs_set_ea+0x453/0xbf0 [ 138.988115] ? __pfx_ntfs_set_ea+0x10/0x10 [ 138.993390] ? kernel_text_address+0xd3/0xe0 [ 138.998270] ? __kernel_text_address+0x16/0x50 [ 139.002121] ? unwind_get_return_address+0x3e/0x60 [ 139.005659] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 139.010177] ? arch_stack_walk+0xa2/0x100 [ 139.013657] ? filter_irq_stacks+0x27/0x80 [ 139.017018] ntfs_setxattr+0x405/0x440 [ 139.022151] ? __pfx_ntfs_setxattr+0x10/0x10 [ 139.026569] ? kvmalloc_node+0x2d/0x120 [ 139.030329] ? kasan_save_stack+0x41/0x60 [ 139.033883] ? kasan_save_stack+0x2a/0x60 [ 139.037338] ? kasan_set_track+0x29/0x40 [ 139.040163] ? kasan_save_alloc_info+0x1f/0x30 [ 139.043588] ? __kasan_kmalloc+0x8b/0xa0 [ 139.047255] ? __kmalloc_node+0x68/0x150 [ 139.051264] ? kvmalloc_node+0x2d/0x120 [ 139.055301] ? vmemdup_user+0x2b/0xa0 [ 139.058584] __vfs_setxattr+0x121/0x170 [ 139.062617] ? __pfx___vfs_setxattr+0x10/0x10 [ 139.066282] __vfs_setxattr_noperm+0x97/0x300 [ 139.070061] __vfs_setxattr_locked+0x145/0x170 [ 139.073580] vfs_setxattr+0x137/0x2a0 [ 139.076641] ? __pfx_vfs_setxattr+0x10/0x10 [ 139.080223] ? __kasan_check_write+0x18/0x20 [ 139.084234] do_setxattr+0xce/0x150 [ 139.087768] setxattr+0x126/0x140 [ 139.091250] ? __pfx_setxattr+0x10/0x10 [ 139.094948] ? __virt_addr_valid+0xcb/0x140 [ 139.097838] ? __call_rcu_common.constprop.0+0x1c7/0x330 [ 139.102688] ? debug_smp_processor_id+0x1b/0x30 [ 139.105985] ? kasan_quarantine_put+0x5b/0x190 [ 139.109980] ? putname+0x84/0xa0 [ 139.113886] ? __kasan_slab_free+0x11e/0x1b0 [ 139.117961] ? putname+0x84/0xa0 [ 139.121316] ? preempt_count_sub+0x1c/0xd0 [ 139.124427] ? __mnt_want_write+0xae/0x100 [ 139.127836] ? mnt_want_write+0x8f/0x150 [ 139.130954] path_setxattr+0x164/0x180 [ 139.133998] ? __pfx_path_setxattr+0x10/0x10 [ 139.137853] ? __pfx_ksys_pwrite64+0x10/0x10 [ 139.141299] ? debug_smp_processor_id+0x1b/0x30 [ 139.145714] ? fpregs_assert_state_consistent+0x6b/0x80 [ 139.150796] __x64_sys_setxattr+0x71/0x90 [ 139.155407] do_syscall_64+0x3f/0x90 [ 139.159035] entry_SYSCALL_64_after_hwframe+0x72/0xdc [ 139.163843] RIP: 0033:0x7f108cae4469 [ 139.166481] Code: 00 f3 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 088 [ 139.183764] RSP: 002b:00007fff87588388 EFLAGS: 00000286 ORIG_RAX: 00000000000000bc [ 139.190657] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f108cae4469 [ 139.196586] RDX: 00007fff875883b0 RSI: 00007fff875883d1 RDI: 00007fff875883b6 [ 139.201716] RBP: 00007fff8758c530 R08: 0000000000000001 R09: 00007fff8758c618 [ 139.207940] R10: 0000000000000006 R11: 0000000000000286 R12: 00000000004004c0 [ 139.214007] R13: 00007fff8758c610 R14: 0000000000000000 R15 ---truncated---
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.1 Critical
Exploitation
<1% chance of attack within 30 days
Timeline
Published24 Dec 2025
Updated9 Oct 2026
First seen6 Mar 2026
Sources
ROOT-OS-DEBIAN-12-CVE-2023-54125 · OSV
UBUNTU-CVE-2023-54125 · OSV
DEBIAN-CVE-2023-54125 · OSV
BELL-CVE-2023-54125 · OSV
ROOT-OS-UBUNTU-2204-CVE-2023-54125 · OSV
CVE-2023-54125 · NVD
CVE-2023-54125 · MITRE
CVE-2023-54125 · OSV
Track software like this
Free during beta