CVE-2023-54297 Details
Description
In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: fix memory leak after finding block group with super blocks At exclude_super_stripes(), if we happen to find a block group that has super blocks mapped to it and we are on a zoned filesystem, we error out as this is not supposed to happen, indicating either a bug or maybe some memory corruption for example. However we are exiting the function without freeing the memory allocated for the logical address of the super blocks. Fix this by freeing the logical address.
A memory leak vulnerability has been identified in the Linux kernel's Btrfs file system when used on a zoned filesystem. The issue arises in the 'exclude_super_stripes' function, where the code improperly handles block groups containing super blocks. Instead of freeing the memory allocated for the logical address of these super blocks, the function exits while leaving this memory allocated. This oversight could indicate a bug or potential memory corruption.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Dec 30, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/ab80a901f8daca07c4a54af0ab0de745c9918294 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/c35ea606196243063e63785918c7c8fe27c45798 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/cca627afb463a4b47721eac017516ba200de85c3 | kernel.org | Source CodeVendor |
| https://git.kernel.org/stable/c/f1a07c2b4e2c473ec322b8b9ece071b8c88a3512 | kernel.org | Source CodeVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| Linux kernel | All versions |
CPE
Remediation
| |
| btrfs | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Dec 30, 2025 | New CVE Received | kernel.org |