UnratedFix available
ext4: correct grp validation in ext4_mb_good_group
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.195, 5.15.132, 6.1.53, 6.4.16, 6.5.3
- CVEs
- CVE-2023-53861
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 28 Oct 2026, 08:57 UTC · Revision 1
Source evidence
ext4: correct grp validation in ext4_mb_good_group
core-osv · Original sourcePublished 9 Dec 2025, 01:30 UTC
In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.
osv:CVE-2023-53861
Kernel
Fixed versions: 5.10.195, 5.15.132, 6.1.53, 6.4.16, 6.5.3
Complete source record
{
"id": "0c56316735f99f95c4e53f48517fe999ce601b0f4a43eb18b7b6c86ada73090e",
"url": "https://osv.dev/vulnerability/CVE-2023-53861",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "ext4: correct grp validation in ext4_mb_good_group",
"summary": "In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.",
"evidence": "osv:CVE-2023-53861",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.195",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.132",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.53",
"evidence": "/affected/1/ranges"
},
{
"value": "6.4.16",
"evidence": "/affected/1/ranges"
},
{
"value": "6.5.3",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2023-53861",
"aliases": [
"CVE-2023-53861"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "100c0ad6c04597fefeaaba2bb1827cc015d95067"
},
{
"fixed": "245759d987b617d183061db6ab8886ebb5cc78e9"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "620a3c28221bb219b81bc0bffd065cc187494302"
},
{
"fixed": "3e24082f16825279054a2b8a5e668d65070bbf07"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "b4319e457d6e3fb33e443efeaf4634fc36e8a9ed"
},
{
"fixed": "772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5354b2af34064a4579be8bc0e2f15a7b70f14b5f"
},
{
"fixed": "83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4"
},
{
"fixed": "e69d665987db0e37896adf78a7e718f9a0a75d3f"
},
{
"fixed": "a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.10.181"
},
{
"fixed": "5.10.195"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "5.15.113"
},
{
"fixed": "5.15.132"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.1.30"
},
{
"fixed": "6.1.53"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "6.3.4"
},
{
"fixed": "6.4"
}
]
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "31668cebf45adfb6283e465e641c4f5a21b07afa"
}
]
}
],
"versions": [
"v5.10.194",
"v5.10.193",
"v5.10.192",
"v5.10.191",
"v5.10.190",
"v5.10.189",
"v5.10.188",
"v5.10.187",
"v5.10.186",
"v5.10.185",
"v5.10.184",
"v5.10.183",
"v5.10.182",
"v5.10.181",
"v5.15.131",
"v5.15.130",
"v5.15.129",
"v5.15.128",
"v5.15.127",
"v5.15.126",
"v5.15.125",
"v5.15.124",
"v5.15.123",
"v5.15.122",
"v5.15.121",
"v5.15.120",
"v5.15.119",
"v5.15.118",
"v5.15.117",
"v5.15.116",
"v5.15.115",
"v5.15.114",
"v5.15.113",
"v6.1.52",
"v6.1.51",
"v6.1.50",
"v6.1.49",
"v6.1.48",
"v6.1.47",
"v6.1.46",
"v6.1.45",
"v6.1.44",
"v6.1.43",
"v6.1.42",
"v6.1.41",
"v6.1.40",
"v6.1.39",
"v6.1.38",
"v6.1.37",
"v6.1.36",
"v6.1.35",
"v6.1.34",
"v6.1.33",
"v6.1.32",
"v6.1.31",
"v6.1.30",
"v6.3.13",
"v6.3.12",
"v6.3.11",
"v6.3.10",
"v6.3.9",
"v6.3.8",
"v6.3.7",
"v6.3.6",
"v6.3.5",
"v6.3.4"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53861.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.10.195"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.132"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.53"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.4.16"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.4.0"
},
{
"fixed": "6.5.3"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53861.json"
}
}
],
"modified": "2026-10-08T02:48:13.994304565Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/245759d987b617d183061db6ab8886ebb5cc78e9",
"https://git.kernel.org/stable/c/3e24082f16825279054a2b8a5e668d65070bbf07",
"https://git.kernel.org/stable/c/772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d",
"https://git.kernel.org/stable/c/83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4",
"https://git.kernel.org/stable/c/a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93",
"https://git.kernel.org/stable/c/e69d665987db0e37896adf78a7e718f9a0a75d3f",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53861.json",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53861",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53861.json"
}
},
"related_cves": [
{
"value": "CVE-2023-53861",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 98277,
"published_at": "2025-12-09T01:30:29.423+00:00"
}