In the Linux kernel, the following vulnerability has been resolved:

ext4: remove a BUG_ON in ext4_mb_release_group_pa()

If a malicious fuzzer overwrites the ext4 superblock while it is
mounted such that the s_first_data_block is set to a very large
number, the calculation of the block group can underflow, and trigger
a BUG_ON check. Change this to be an ext4_warning so that we don't
crash the kernel.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00049.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/185062a21976fbc38f2efd296951b02c4500cf65 cve-icon cve-icon
https://git.kernel.org/stable/c/463808f237cf73e98a1a45ff7460c2406a150a0b cve-icon cve-icon
https://git.kernel.org/stable/c/53c14e7cc2257191ba15425c15638fc4f8abb92b cve-icon cve-icon
https://git.kernel.org/stable/c/978e5e9111af18741449b81fefd531a622dd969a cve-icon cve-icon
https://git.kernel.org/stable/c/b0fc279de4bf17e1710bb7e83906538ff8f11111 cve-icon cve-icon
https://git.kernel.org/stable/c/bf2a16eb4e6d06124bd8436d4546f61539a65f29 cve-icon cve-icon
https://git.kernel.org/stable/c/d5bf8f7fb3ee3d99d1303ceb54599ea0599a4a5b cve-icon cve-icon
https://git.kernel.org/stable/c/d87a4e4094c9879fc8acdff8ce59fdffa979c8e0 cve-icon cve-icon
https://git.kernel.org/stable/c/ef16d8a1798db1a1604ac44ca1bd73ec6bebf483 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025100103-CVE-2023-53450-35c4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-53450 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-53450 cve-icon
History

Mon, 05 Jan 2026 10:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Thu, 02 Oct 2025 09:00:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Thu, 02 Oct 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Important

Wed, 01 Oct 2025 12:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.
Title ext4: remove a BUG_ON in ext4_mb_release_group_pa()
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T10:20:35.998Z

Reserved: 2025-09-17T14:54:09.754Z

Link: CVE-2023-53450

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-10-01T12:15:41.503

Modified: 2025-10-02T19:12:17.160

Link: CVE-2023-53450

cve-icon Redhat

Severity : Important

Publid Date: 2025-10-01T00:00:00Z

Links: CVE-2023-53450 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-10-02T08:39:37Z

Weaknesses

No weakness.