Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-53537— f2fs: fix to avoid use-after-free for cached IPU bio

AI Predicted 6.5 Difficulty: Moderate EPSS 0.15% · P5

Possible ATT&CK Techniques 1AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 14

VendorProductVersion RangeStatus
LinuxLinux0b20fcec8651569935a10afe03fedc0b812d044e< b2f423fda64fb49213aa0ed5056079cf295a5df2affected
0b20fcec8651569935a10afe03fedc0b812d044e< 9a7f63283af6befc0f91d549f4f6917dff7479a9affected
0b20fcec8651569935a10afe03fedc0b812d044e< 7d058f0ab161437369ad6e45a4b67c2886e71373affected
0b20fcec8651569935a10afe03fedc0b812d044e< 97ec6f1788cc6bee3f8c89cb908e1a2a1cd859bbaffected
0b20fcec8651569935a10afe03fedc0b812d044e< af4ce124d7bd74cb839bbdaccffbb416771a56b5affected
0b20fcec8651569935a10afe03fedc0b812d044e< 5cdb422c839134273866208dad5360835ddb9794affected
5.5affected
< 5.5unaffected
… +6 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-53537

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
f2fs: fix to avoid use-after-free for cached IPU bio
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid use-after-free for cached IPU bio xfstest generic/019 reports a bug: kernel BUG at mm/filemap.c:1619! RIP: 0010:folio_end_writeback+0x8a/0x90 Call Trace: end_page_writeback+0x1c/0x60 f2fs_write_end_io+0x199/0x420 bio_endio+0x104/0x180 submit_bio_noacct+0xa5/0x510 submit_bio+0x48/0x80 f2fs_submit_write_bio+0x35/0x300 f2fs_submit_merged_ipu_write+0x2a0/0x2b0 f2fs_write_single_data_page+0x838/0x8b0 f2fs_write_cache_pages+0x379/0xa30 f2fs_write_data_pages+0x30c/0x340 do_writepages+0xd8/0x1b0 __writeback_single_inode+0x44/0x370 writeback_sb_inodes+0x233/0x4d0 __writeback_inodes_wb+0x56/0xf0 wb_writeback+0x1dd/0x2d0 wb_workfn+0x367/0x4a0 process_one_work+0x21d/0x430 worker_thread+0x4e/0x3c0 kthread+0x103/0x130 ret_from_fork+0x2c/0x50 The root cause is: after cp_error is set, f2fs_submit_merged_ipu_write() in f2fs_write_single_data_page() tries to flush IPU bio in cache, however f2fs_submit_merged_ipu_write() missed to check validity of @bio parameter, result in submitting random cached bio which belong to other IO context, then it will cause use-after-free issue, fix it by adding additional validity check.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于缓存IPU bio存在释放后重用问题，可能导致系统崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 0b20fcec8651569935a10afe03fedc0b812d044e ~ b2f423fda64fb49213aa0ed5056079cf295a5df2 -
LinuxLinux 5.5 -

II. Public POCs for CVE-2023-53537

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-53537

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-10-04 · 144 CVEs total

CVE-2025-399329.8 CRITICALsmb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
CVE-2025-399489.8 CRITICALice: fix Rx page leak on multi-buffer frames
CVE-2025-399469.8 CRITICALtls: make sure to abort the stream if headers are bogus
CVE-2025-399339.4 CRITICALsmb: client: let recv_done verify data_offset, data_length and remaining_data_length
CVE-2025-399439.4 CRITICALksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
CVE-2025-399528.8 HIGHwifi: wilc1000: avoid buffer overflow in WID string configuration
CVE-2025-399317.8 HIGHcrypto: af_alg - Set merge to zero early in af_alg_sendmsg
CVE-2025-399517.8 HIGHum: virtio_uml: Fix use-after-free after put_device in probe
CVE-2025-399497.8 HIGHqed: Don't collect too many protection override GRC elements
CVE-2025-399457.8 HIGHcnic: Fix use-after-free bugs in cnic_delete_task
CVE-2025-399447.8 HIGHocteontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
CVE-2025-399417.8 HIGHzram: fix slot write race condition
CVE-2025-399397.8 HIGHiommu/s390: Fix memory corruption when using identity domain
CVE-2025-399357.8 HIGHASoC: codec: sma1307: Fix memory corruption in sma1307_setting_loaded()
CVE-2025-399427.5 HIGHksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
CVE-2025-399297.5 HIGHsmb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
CVE-2022-50505iommu/amd: Fix pci device refcount leak in ppr_notifier()
CVE-2022-50503mtd: lpddr2_nvm: Fix possible null-ptr-deref
CVE-2022-50501media: coda: Add check for dcoda_iram_alloc
CVE-2022-50504powerpc/rtas: avoid scheduling in rtas_os_term()

Showing top 20 of 144 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-53537

No comments yet

Leave a comment