exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree

{
  "id": "ac9c56350cca7eb1e52aaa4e527dc6e8f23b2d022788e73295e7414d5f2facae",
  "url": "https://osv.dev/vulnerability/CVE-2023-54194",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree The call stack shown below is a scenario in the Linux 4.19 kernel. Allocating memory failed where exfat fs use kmalloc_array due to system memory fragmentation, while the u-disk was inserted without recognition. Devices such as u-disk using the exfat file system are pluggable and may be insert into the system at any time. However, long-term running systems cannot guarantee the continuity of physical memory. Therefore, it's necessary to address this issue. Binder:2632_6: page allocation failure: order:4, mode:0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null) Call trace: [242178.097582] dump_backtrace+0x0/0x4 [242178.097589] dump_stack+0xf4/0x134 [242178.097598] warn_alloc+0xd8/0x144 [242178.097603] __alloc_pages_nodemask+0x1364/0x1384 [242178.097608] kmalloc_order+0x2c/0x510 [242178.097612] kmalloc_order_trace+0x40/0x16c [242178.097618] __kmalloc+0x360/0x408 [242178.097624] load_alloc_bitmap+0x160/0x284 [242178.097628] exfat_fill_super+0xa3c/0xe7c [242178.097635] mount_bdev+0x2e8/0x3a0 [242178.097638] exfat_fs_mount+0x40/0x50 [242178.097643] mount_fs+0x138/0x2e8 [242178.097649] vfs_kern_mount+0x90/0x270 [242178.097655] do_mount+0x798/0x173c [242178.097659] ksys_mount+0x114/0x1ac [242178.097665] __arm64_sys_mount+0x24/0x34 [242178.097671] el0_svc_common+0xb8/0x1b8 [242178.097676] el0_svc_handler+0x74/0x90 [242178.097681] el0_svc+0x8/0x340 By analyzi",
    "evidence": "osv:CVE-2023-54194",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.10.190",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "5.15.126",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.45",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.4.10",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2023-54194",
      "aliases": [
        "CVE-2023-54194"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "1e49a94cf707204b66a3fb242f2814712c941f52"
                },
                {
                  "fixed": "79d16a84ea41272dfcb0c00f9798ddd0edd8098d"
                },
                {
                  "fixed": "8a34a242cf03211cc89f68308d149b793f63c479"
                },
                {
                  "fixed": "1427a7e96fb90d0896f74f5bcd21feb03cc7c3d0"
                },
                {
                  "fixed": "0c5c3e8a2550b6b2a304b45f260296db9c09df96"
                },
                {
                  "fixed": "daf60d6cca26e50d65dac374db92e58de745ad26"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54194.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.7.0"
                },
                {
                  "fixed": "5.10.190"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.11.0"
                },
                {
                  "fixed": "5.15.126"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.45"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.4.10"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54194.json"
          }
        }
      ],
      "modified": "2026-10-30T02:30:45.678187924Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/0c5c3e8a2550b6b2a304b45f260296db9c09df96",
        "https://git.kernel.org/stable/c/1427a7e96fb90d0896f74f5bcd21feb03cc7c3d0",
        "https://git.kernel.org/stable/c/79d16a84ea41272dfcb0c00f9798ddd0edd8098d",
        "https://git.kernel.org/stable/c/8a34a242cf03211cc89f68308d149b793f63c479",
        "https://git.kernel.org/stable/c/daf60d6cca26e50d65dac374db92e58de745ad26",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54194.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-54194",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54194.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2023-54194",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 490626,
  "published_at": "2025-12-30T12:09:01.436+00:00"
}