CVE-2023-54272

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()

In a previous commit c1006bd13146, ni->mi.mrec in ni_write_inode() could be NULL, and thus a NULL check is added for this variable.

However, in the same call stack, ni->mi.mrec can be also dereferenced in ni_clear():

ntfs_evict_inode(inode) ni_write_inode(inode, ...) ni = ntfs_i(inode); is_rec_inuse(ni->mi.mrec) -> Add a NULL check by previous commit ni_clear(ntfs_i(inode)) is_rec_inuse(ni->mi.mrec) -> No check

Thus, a possible null-pointer dereference may exist in ni_clear(). To fix it, a NULL check is added in this function.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 4342306f0f0d5ff4315a204d315c1b51b914fca5, < 20f9bfc664d6a478f9a5bbc0c380f80f7a1a06c6; >= 4342306f0f0d5ff4315a204d315c1b51b914fca5, < 39c6312009574ca73865354133ca222e7753a71b; >= 4342306f0f0d5ff4315a204d315c1b51b914fca5, < e7675f85a92233136c630000a0b7cf97826705da; >= 4342306f0f0d5ff4315a204d315c1b51b914fca5, < ec275bf9693d19cc0fdce8436f4c425ced86f6e7
LinuxLinux5.15

References

Timeline

Published
Dec 30, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-54273In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix leak of dev tracker At the stage of direction checks, the neCVE-2023-54274In the Linux kernel, the following vulnerability has been resolved: RDMA/srpt: Add a check for valid 'mad_agent' pointer When unregisterinCVE-2023-54275In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup crypto_alloCVE-2023-54276In the Linux kernel, the following vulnerability has been resolved: nfsd: move init of percpu reply_cache_stats counters back to nfsd_init_CVE-2023-54277In the Linux kernel, the following vulnerability has been resolved: fbdev: udlfb: Fix endpoint check The syzbot fuzzer detected a problem CVE-2023-54278In the Linux kernel, the following vulnerability has been resolved: s390/vmem: split pages when debug pagealloc is enabled Since commit bbCVE-2023-54279In the Linux kernel, the following vulnerability has been resolved: MIPS: fw: Allow firmware to pass a empty env fw_getenv will use env enCVE-2023-54286.5The Image vertical reel scroll slideshow plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, aCVE-2023-542809.8In the Linux kernel, the following vulnerability has been resolved: cifs: fix potential race when tree connecting ipc Protect access of TCCVE-2023-54281In the Linux kernel, the following vulnerability has been resolved: btrfs: release path before inode lookup during the ino lookup ioctl DuCVE-2023-54282In the Linux kernel, the following vulnerability has been resolved: media: tuners: qt1010: replace BUG_ON with a regular error BUG_ON is uCVE-2023-54283In the Linux kernel, the following vulnerability has been resolved: bpf: Address KCSAN report on bpf_lru_list KCSAN reported a data-race w
CVE-2023-54272: Unscored | Vulnix