CVE-2023-54285

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-54285
In the Linux kernel, the following vulnerability has been resolved: iomap: Fix possible overflow condition in iomap_write_delalloc_scan folio_next_index() returns an unsigned long value which left shifted by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead use folio_pos(folio) + folio_size(folio), which does this correctly.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0c6cf409093f307ee05114f834516730c0da5b21 Patch
https://git.kernel.org/stable/c/5c281b0c5d18c8eeb1cfd5023f4adb153e6d1240 Patch
https://git.kernel.org/stable/c/eee2d2e6ea5550118170dbd5bb1316ceb38455fb Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

26 Feb 2026, 18:44

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/0c6cf409093f307ee05114f834516730c0da5b21 - () https://git.kernel.org/stable/c/0c6cf409093f307ee05114f834516730c0da5b21 - Patch
References () https://git.kernel.org/stable/c/5c281b0c5d18c8eeb1cfd5023f4adb153e6d1240 - () https://git.kernel.org/stable/c/5c281b0c5d18c8eeb1cfd5023f4adb153e6d1240 - Patch
References () https://git.kernel.org/stable/c/eee2d2e6ea5550118170dbd5bb1316ceb38455fb - () https://git.kernel.org/stable/c/eee2d2e6ea5550118170dbd5bb1316ceb38455fb - Patch
First Time Linux
Linux linux Kernel
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-787

06 Feb 2026, 17:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0c6cf409093f307ee05114f834516730c0da5b21 -

30 Dec 2025, 13:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-12-30 13:16

Updated : 2026-02-26 18:44

NVD link : CVE-2023-54285

Mitre link : CVE-2023-54285

CVE.ORG link : CVE-2023-54285

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write