{"id":"CVE-2023-53450","state":"PUBLISHED","title":"ext4: remove a BUG_ON in ext4_mb_release_group_pa()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: remove a BUG_ON in ext4_mb_release_group_pa()\n\nIf a malicious fuzzer overwrites the ext4 superblock while it is\nmounted such that the s_first_data_block is set to a very large\nnumber, the calculation of the block group can underflow, and trigger\na BUG_ON check.  Change this to be an ext4_warning so that we don't\ncrash the kernel.","publishedAt":"2025-10-01T11:42:22.074Z","updatedAt":"2026-05-11T19:45:14.540Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"ef16d8a1798db1a1604ac44ca1bd73ec6bebf483","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"185062a21976fbc38f2efd296951b02c4500cf65","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"b0fc279de4bf17e1710bb7e83906538ff8f11111","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"978e5e9111af18741449b81fefd531a622dd969a","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"d87a4e4094c9879fc8acdff8ce59fdffa979c8e0","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"bf2a16eb4e6d06124bd8436d4546f61539a65f29","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"53c14e7cc2257191ba15425c15638fc4f8abb92b","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"463808f237cf73e98a1a45ff7460c2406a150a0b","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/mballoc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.25","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.25","versionType":"semver"},{"version":"4.14.315","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.283","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.243","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.180","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.112","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.29","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2.16","status":"unaffected","lessThanOrEqual":"6.2.*","versionType":"semver"},{"version":"6.3.3","status":"unaffected","lessThanOrEqual":"6.3.*","versionType":"semver"},{"version":"6.4","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/mballoc.c"]}],"references":["https://git.kernel.org/stable/c/d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b","https://git.kernel.org/stable/c/ef16d8a1798db1a1604ac44ca1bd73ec6bebf483","https://git.kernel.org/stable/c/185062a21976fbc38f2efd296951b02c4500cf65","https://git.kernel.org/stable/c/b0fc279de4bf17e1710bb7e83906538ff8f11111","https://git.kernel.org/stable/c/978e5e9111af18741449b81fefd531a622dd969a","https://git.kernel.org/stable/c/d87a4e4094c9879fc8acdff8ce59fdffa979c8e0","https://git.kernel.org/stable/c/bf2a16eb4e6d06124bd8436d4546f61539a65f29","https://git.kernel.org/stable/c/53c14e7cc2257191ba15425c15638fc4f8abb92b","https://git.kernel.org/stable/c/463808f237cf73e98a1a45ff7460c2406a150a0b"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/53xxx/CVE-2023-53450.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-53450","state":"PUBLISHED","datePublished":"2025-10-01T11:42:22.074Z","dateUpdated":"2026-05-11T19:45:14.540Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-09-17T14:54:09.754Z"},"containers":{"cna":{"title":"ext4: remove a BUG_ON in ext4_mb_release_group_pa()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: remove a BUG_ON in ext4_mb_release_group_pa()\n\nIf a malicious fuzzer overwrites the ext4 superblock while it is\nmounted such that the s_first_data_block is set to a very large\nnumber, the calculation of the block group can underflow, and trigger\na BUG_ON check.  Change this to be an ext4_warning so that we don't\ncrash the kernel."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"ef16d8a1798db1a1604ac44ca1bd73ec6bebf483","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"185062a21976fbc38f2efd296951b02c4500cf65","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"b0fc279de4bf17e1710bb7e83906538ff8f11111","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"978e5e9111af18741449b81fefd531a622dd969a","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"d87a4e4094c9879fc8acdff8ce59fdffa979c8e0","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"bf2a16eb4e6d06124bd8436d4546f61539a65f29","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"53c14e7cc2257191ba15425c15638fc4f8abb92b","versionType":"git"},{"version":"c9de560ded61faa5b754137b7753da252391c55a","status":"affected","lessThan":"463808f237cf73e98a1a45ff7460c2406a150a0b","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/mballoc.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"2.6.25","status":"affected"},{"version":"0","status":"unaffected","lessThan":"2.6.25","versionType":"semver"},{"version":"4.14.315","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.283","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.243","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.180","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.112","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.29","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.2.16","status":"unaffected","lessThanOrEqual":"6.2.*","versionType":"semver"},{"version":"6.3.3","status":"unaffected","lessThanOrEqual":"6.3.*","versionType":"semver"},{"version":"6.4","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/ext4/mballoc.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b"},{"url":"https://git.kernel.org/stable/c/ef16d8a1798db1a1604ac44ca1bd73ec6bebf483"},{"url":"https://git.kernel.org/stable/c/185062a21976fbc38f2efd296951b02c4500cf65"},{"url":"https://git.kernel.org/stable/c/b0fc279de4bf17e1710bb7e83906538ff8f11111"},{"url":"https://git.kernel.org/stable/c/978e5e9111af18741449b81fefd531a622dd969a"},{"url":"https://git.kernel.org/stable/c/d87a4e4094c9879fc8acdff8ce59fdffa979c8e0"},{"url":"https://git.kernel.org/stable/c/bf2a16eb4e6d06124bd8436d4546f61539a65f29"},{"url":"https://git.kernel.org/stable/c/53c14e7cc2257191ba15425c15638fc4f8abb92b"},{"url":"https://git.kernel.org/stable/c/463808f237cf73e98a1a45ff7460c2406a150a0b"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:45:14.540Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"4.14.315"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"4.19.283"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"5.4.243"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"5.10.180"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"5.15.112"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"6.1.29"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"6.2.16"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"6.3.3"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"2.6.25","versionEndExcluding":"6.4"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}