CVE-2023-53301 - f2fs: fix kernel crash due to null io->bio

Back Back to CVE browser

HIGH

f2fs: fix kernel crash due to null io->bio

Published Sep 16, 2025

7.1

HIGH

CVSS 3.1

EPSS 0.15%

Description

We should return when io->bio is null before doing anything. Otherwise, panic.

BUG: kernel NULL pointer dereference, address: 0000000000000010 RIP: 0010:__submit_merged_write_cond+0x164/0x240 [f2fs] Call Trace: <TASK> f2fs_submit_merged_write+0x1d/0x30 [f2fs] commit_checkpoint+0x110/0x1e0 [f2fs] f2fs_write_checkpoint+0x9f7/0xf00 [f2fs] ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] __checkpoint_and_complete_reqs+0x84/0x190 [f2fs] ? preempt_count_add+0x82/0xc0 ? __pfx_issue_checkpoint_thread+0x10/0x10 [f2fs] issue_checkpoint_thread+0x4c/0xf0 [f2fs] ? __pfx_autoremove_wake_function+0x10/0x10 kthread+0xff/0x130 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2c/0x50 </TASK>

Affected products

Vendor Linux Product Linux Default
unaffected
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
- Version
  
  Status
  affected
  Constraints
Vendor Linux Product Linux Default
affected
- Version
  5.18
  Status
  affected
  Constraints
  -
- Version
  0
  Status
  unaffected
  Constraints
  <5.18
- Version
  6.1.16
  Status
  unaffected
  Constraints
  <=6.1.*
- Version
  6.2.3
  Status
  unaffected
  Constraints
  <=6.2.*
- Version
  6.3
  Status
  unaffected
  Constraints
  <=*

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linux

unaffected

Version	Status	Constraints
	affected
	affected
	affected

Linux

affected

Version	Status	Constraints
5.18	affected	-
0	unaffected	<5.18
6.1.16	unaffected	<=6.1.*
6.2.3	unaffected	<=6.2.*
6.3	unaffected	<=*

Red Hat Enterprise Linux 10

kernel

Not affected
Red Hat Enterprise Linux 6

kernel

Not affected
Red Hat Enterprise Linux 7

kernel

Not affected
Red Hat Enterprise Linux 7

kernel-rt

Not affected
Red Hat Enterprise Linux 8

kernel

Not affected
Red Hat Enterprise Linux 8

kernel-rt

Not affected
Red Hat Enterprise Linux 9

kernel

Not affected
Red Hat Enterprise Linux 9

kernel-rt

Not affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	kernel	Not affected	n/a
Red Hat Enterprise Linux 6	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel	Not affected	n/a
Red Hat Enterprise Linux 7	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 8	kernel	Not affected	n/a
Red Hat Enterprise Linux 8	kernel-rt	Not affected	n/a
Red Hat Enterprise Linux 9	kernel	Not affected	n/a
Red Hat Enterprise Linux 9	kernel-rt	Not affected	n/a

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (8)

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2023-53301		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395669		Issue Tracking
https://git.kernel.org/stable/c/267c159f9c7bcb7009dae16889b880c5ed8759a8		Patch
https://git.kernel.org/stable/c/83dbb9a1bd5ef2eea73275906fc50b2fdda39cd5		Patch
https://git.kernel.org/stable/c/eb52f13c6093ac761dbeaa459c810fc0253209fc		Patch
https://lore.kernel.org/linux-cve-announce/2025091628-CVE-2023-53301-4a84@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-53301
https://www.cve.org/CVERecord?id=CVE-2023-53301