Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1020 CNY

100%
Buy Us a Coffee

CVE-2023-54293— bcache: fixup btree_cache_wait list damage

AI Predicted 5.5 Difficulty: Moderate EPSS 0.03% · P10

Affected Version Matrix 12

VendorProductVersion RangeStatus
LinuxLinux8e7102273f597dbb38af43da874f8c123f8e6dbe< bcb295778afda4f2feb0d3c0289a53fd43d5a3a6affected
8e7102273f597dbb38af43da874f8c123f8e6dbe< cbdd5b3322f7bbe6454c97cac994757f1192c07baffected
8e7102273f597dbb38af43da874f8c123f8e6dbe< 25ec4779d0fb3ed9cac1e4d9e0e4261b4a12f6edaffected
8e7102273f597dbb38af43da874f8c123f8e6dbe< 2882a4c4f0c90e99f37dbd8db369b9982fd613e7affected
8e7102273f597dbb38af43da874f8c123f8e6dbe< f0854489fc07d2456f7cc71a63f4faf9c716ffbeaffected
5.7affected
< 5.7unaffected
5.10.188≤ 5.10.*unaffected
… +4 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-54293

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
bcache: fixup btree_cache_wait list damage
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: bcache: fixup btree_cache_wait list damage We get a kernel crash about "list_add corruption. next->prev should be prev (ffff9c801bc01210), but was ffff9c77b688237c. (next=ffffae586d8afe68)." crash> struct list_head 0xffff9c801bc01210 struct list_head { next = 0xffffae586d8afe68, prev = 0xffffae586d8afe68 } crash> struct list_head 0xffff9c77b688237c struct list_head { next = 0x0, prev = 0x0 } crash> struct list_head 0xffffae586d8afe68 struct list_head struct: invalid kernel virtual address: ffffae586d8afe68 type: "gdb_readmem_callback" Cannot access memory at address 0xffffae586d8afe68 [230469.019492] Call Trace: [230469.032041] prepare_to_wait+0x8a/0xb0 [230469.044363] ? bch_btree_keys_free+0x6c/0xc0 [escache] [230469.056533] mca_cannibalize_lock+0x72/0x90 [escache] [230469.068788] mca_alloc+0x2ae/0x450 [escache] [230469.080790] bch_btree_node_get+0x136/0x2d0 [escache] [230469.092681] bch_btree_check_thread+0x1e1/0x260 [escache] [230469.104382] ? finish_wait+0x80/0x80 [230469.115884] ? bch_btree_check_recurse+0x1a0/0x1a0 [escache] [230469.127259] kthread+0x112/0x130 [230469.138448] ? kthread_flush_work_fn+0x10/0x10 [230469.149477] ret_from_fork+0x35/0x40 bch_btree_check_thread() and bch_dirty_init_thread() may call mca_cannibalize() to cannibalize other cached btree nodes. Only one thread can do it at a time, so the op of other threads will be added to the btree_cache_wait list. We must call finish_wait() to remove op from btree_cache_wait before free it's memory address. Otherwise, the list will be damaged. Also should call bch_cannibalize_unlock() to release the btree_cache_alloc_lock and wake_up other waiters.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于btree_cache_wait列表损坏，可能导致内核崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 8e7102273f597dbb38af43da874f8c123f8e6dbe ~ bcb295778afda4f2feb0d3c0289a53fd43d5a3a6 -
LinuxLinux 5.7 -

II. Public POCs for CVE-2023-54293

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-54293

请登录查看更多情报信息。

Same Patch Batch · Linux · 2025-12-30 · 244 CVEs total

CVE-2023-54266media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
CVE-2023-54250ksmbd: avoid out of bounds access in decode_preauth_ctxt()
CVE-2023-54249bus: mhi: ep: Only send -ENOTCONN status if client driver is available
CVE-2023-54251net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX.
CVE-2023-54253btrfs: set page extent mapped after read_folio in relocate_one_page
CVE-2023-54252platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings
CVE-2023-54254drm/ttm: Don't leak a resource on eviction error
CVE-2023-54255sh: dma: Fix DMA channel offset calculation
CVE-2023-54257net: macb: fix a memory corruption in extended buffer descriptor mode
CVE-2023-54258cifs: fix potential oops in cifs_oplock_break
CVE-2023-54259soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow
CVE-2023-54260cifs: Fix lost destroy smbd connection when MR allocate failed
CVE-2023-54261drm/amdkfd: Add missing gfx11 MQD manager callbacks
CVE-2023-54262net/mlx5e: Don't clone flow post action attributes second time
CVE-2023-54263drm/nouveau/kms/nv50-: init hpd_irq_lock for PIOR DP
CVE-2023-54264fs/sysv: Null check to prevent null-ptr-deref bug
CVE-2023-54274RDMA/srpt: Add a check for valid 'mad_agent' pointer
CVE-2023-54275wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup
CVE-2023-54276nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_net
CVE-2023-54273xfrm: Fix leak of dev tracker

Showing top 20 of 244 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-54293

No comments yet

Leave a comment