SECUFOCUSNOW
Home›CVE index›CVE-2023-54068
Review reviewHigh

CVE-2023-54068

Linux

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() BUG_ON() will be triggered when writing files concurrently, because the same page is writtenback multiple times. 1597 void folio_end_writeback(struct folio *folio) 1598 { ...... 1618 if (!__folio_end_writeback(folio)) 1619 BUG(); ...... 1625 } kernel BUG at mm/filemap.c:1619! Call Trace: <TASK> f2fs_write_end_io+0x1a0/0x370 blk_update_request+0x6c/0x410 blk_mq_end_request+0x15/0x130 blk_complete_reqs+0x3c/0x50 __do_softirq+0xb8/0x29b ? sort_...

CVSS
7.8
EPSS
0.13%
3.33% percentile
CISA KEV
Not listed
Published
2025.12.24
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.13%
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() BUG_ON() will be triggered when writing files concurrently, because the same page is writtenback multiple times. 1597 void folio_end_writeback(struct folio *folio) 1598 { ...... 1618 if (!__folio_end_writeback(folio)) 1619 BUG(); ...... 1625 } kernel BUG at mm/filemap.c:1619! Call Trace: <TASK> f2fs_write_end_io+0x1a0/0x370 blk_update_request+0x6c/0x410 blk_mq_end_request+0x15/0x130 blk_complete_reqs+0x3c/0x50 __do_softirq+0xb8/0x29b ? sort_...

Affected product and versions

Product
Linux
Affected versions
>= 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < a8226a45b2a9ce83ba7a167a387a00fecc319e71, >= 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < 169134da419cb8ffbe3b0743bc24573e16952ea9, >= 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < 6604df2a9d07ba8f8fb1ac14046c2c83776faa4f, >= 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < 9940877c4fe752923a53f0f7372f2f152b6eccf0, >= 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < ad31eed06c3b4d63b2d38322a271d4009aee4bb3, >= 4c8ff7095bef64fc47e996a938f7d57f9e077da3 < babedcbac164cec970872b8097401ca913a80e61, >= 5.6
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available