CVE-2023-53450: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: ext4: remove a BUG_ON in ext4_mb_release_group_pa() If a malicious fuzzer overwrites the ext4 superblock while it is mounted such that the s_first_data_block is set to a very large number, the calculation of the block group can underflow, and trigger a BUG_ON check. Change this to be an ext4_warning so that we don't crash the kernel.

Affected products

• Linux Linux Kernel: from 2.6.25, before 4.14.315 (fixed in 4.14.315); from 4.15, before 4.19.283 (fixed in 4.19.283); from 4.20, before 5.4.243 (fixed in 5.4.243); from 5.5, before 5.10.180 (fixed in 5.10.180); from 5.11, before 5.15.112 (fixed in 5.15.112); from 5.16, before 6.1.29 (fixed in 6.1.29); …

Published 2025-10-01. Last modified 2026-06-17.