GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2023-53091 (GCVE-0-2023-53091)

Vulnerability from cvelistv5 – Published: 2025-05-02 15:55 – Updated: 2026-05-23 15:27
VLAI
Title
ext4: update s_journal_inum if it changes after journal replay
Summary
In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after journal replay When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.
Severity
5.5 (Medium)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 345c0dbf3a30872d9b204db96b5857cd00808cae , < 499fef2030fb754c68b1c7cb3a799a3bc1d0d925 (git)
Affected: 345c0dbf3a30872d9b204db96b5857cd00808cae , < 70e66bdeae4d0f7c8e87762f425b68aedd5e8955 (git)
Affected: 345c0dbf3a30872d9b204db96b5857cd00808cae , < ee0c5277d4fab920bd31345c49e193ecede9ecef (git)
Affected: 345c0dbf3a30872d9b204db96b5857cd00808cae , < 3039d8b8692408438a618fac2776b629852663c3 (git)
Affected: 51890201da4d654f6ca131bc45a0e892bb10de1d (git)
Affected: 7eff961ca9f364be255d279346517ba0158ec8e3 (git)
Affected: a9855260fe8d8680bf8c4f0d8303b696c861e99b (git)
Affected: 795762468125a6412c089651e74f780bee154118 (git)
Affected: 2fd4629de51974002f4e9cf1a35a1926dd6c9d99 (git)
Affected: 3.16.85 , < 3.17 (semver)
Affected: 4.4.221 , < 4.5 (semver)
Affected: 4.9.221 , < 4.10 (semver)
Affected: 4.14.178 , < 4.15 (semver)
Affected: 4.19.73 , < 4.20 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 5.2
Unaffected: 0 , < 5.2 (semver)
Unaffected: 5.15.104 , ≤ 5.15.* (semver)
Unaffected: 6.1.21 , ≤ 6.1.* (semver)
Unaffected: 6.2.8 , ≤ 6.2.* (semver)
Unaffected: 6.3 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/ext4/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "499fef2030fb754c68b1c7cb3a799a3bc1d0d925",
              "status": "affected",
              "version": "345c0dbf3a30872d9b204db96b5857cd00808cae",
              "versionType": "git"
            },
            {
              "lessThan": "70e66bdeae4d0f7c8e87762f425b68aedd5e8955",
              "status": "affected",
              "version": "345c0dbf3a30872d9b204db96b5857cd00808cae",
              "versionType": "git"
            },
            {
              "lessThan": "ee0c5277d4fab920bd31345c49e193ecede9ecef",
              "status": "affected",
              "version": "345c0dbf3a30872d9b204db96b5857cd00808cae",
              "versionType": "git"
            },
            {
              "lessThan": "3039d8b8692408438a618fac2776b629852663c3",
              "status": "affected",
              "version": "345c0dbf3a30872d9b204db96b5857cd00808cae",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "51890201da4d654f6ca131bc45a0e892bb10de1d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "7eff961ca9f364be255d279346517ba0158ec8e3",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "a9855260fe8d8680bf8c4f0d8303b696c861e99b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "795762468125a6412c089651e74f780bee154118",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "2fd4629de51974002f4e9cf1a35a1926dd6c9d99",
              "versionType": "git"
            },
            {
              "lessThan": "3.17",
              "status": "affected",
              "version": "3.16.85",
              "versionType": "semver"
            },
            {
              "lessThan": "4.5",
              "status": "affected",
              "version": "4.4.221",
              "versionType": "semver"
            },
            {
              "lessThan": "4.10",
              "status": "affected",
              "version": "4.9.221",
              "versionType": "semver"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.178",
              "versionType": "semver"
            },
            {
              "lessThan": "4.20",
              "status": "affected",
              "version": "4.19.73",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/ext4/super.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.2"
            },
            {
              "lessThan": "5.2",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.104",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.21",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.2.*",
              "status": "unaffected",
              "version": "6.2.8",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.104",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.21",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.2.8",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.3",
                  "versionStartIncluding": "5.2",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "3.16.85",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.4.221",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.9.221",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.178",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.19.73",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: update s_journal_inum if it changes after journal replay\n\nWhen mounting a crafted ext4 image, s_journal_inum may change after journal\nreplay, which is obviously unreasonable because we have successfully loaded\nand replayed the journal through the old s_journal_inum. And the new\ns_journal_inum bypasses some of the checks in ext4_get_journal(), which\nmay trigger a null pointer dereference problem. So if s_journal_inum\nchanges after the journal replay, we ignore the change, and rewrite the\ncurrent journal_inum to the superblock."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:27:59.253Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/499fef2030fb754c68b1c7cb3a799a3bc1d0d925"
        },
        {
          "url": "https://git.kernel.org/stable/c/70e66bdeae4d0f7c8e87762f425b68aedd5e8955"
        },
        {
          "url": "https://git.kernel.org/stable/c/ee0c5277d4fab920bd31345c49e193ecede9ecef"
        },
        {
          "url": "https://git.kernel.org/stable/c/3039d8b8692408438a618fac2776b629852663c3"
        }
      ],
      "title": "ext4: update s_journal_inum if it changes after journal replay",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2023-53091",
    "datePublished": "2025-05-02T15:55:36.852Z",
    "dateReserved": "2025-05-02T15:51:43.552Z",
    "dateUpdated": "2026-05-23T15:27:59.253Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-53091",
      "date": "2026-09-16",
      "epss": "0.00206",
      "percentile": "0.10943"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2023-53091\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2025-05-02T16:15:28.073\",\"lastModified\":\"2026-06-17T06:44:16.700\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\next4: update s_journal_inum if it changes after journal replay\\n\\nWhen mounting a crafted ext4 image, s_journal_inum may change after journal\\nreplay, which is obviously unreasonable because we have successfully loaded\\nand replayed the journal through the old s_journal_inum. And the new\\ns_journal_inum bypasses some of the checks in ext4_get_journal(), which\\nmay trigger a null pointer dereference problem. So if s_journal_inum\\nchanges after the journal replay, we ignore the change, and rewrite the\\ncurrent journal_inum to the superblock.\"},{\"lang\":\"es\",\"value\":\"En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: actualizar s_journal_inum si cambia despu\u00e9s de la reproducci\u00f3n del diario. Al montar una imagen ext4 manipulada, s_journal_inum puede cambiar despu\u00e9s de la reproducci\u00f3n del diario, lo cual es obviamente irrazonable porque hemos cargado y reproducido correctamente el diario a trav\u00e9s del antiguo s_journal_inum. Y el nuevo s_journal_inum omite algunas de las comprobaciones en ext4_get_journal(), lo que puede desencadenar un problema de desreferencia de puntero nulo. Por lo tanto, si s_journal_inum cambia despu\u00e9s de la reproducci\u00f3n del diario, ignoramos el cambio y reescribimos el journal_inum actual en el superbloque.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"fs/ext4/super.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"345c0dbf3a30872d9b204db96b5857cd00808cae\",\"lessThan\":\"499fef2030fb754c68b1c7cb3a799a3bc1d0d925\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"345c0dbf3a30872d9b204db96b5857cd00808cae\",\"lessThan\":\"70e66bdeae4d0f7c8e87762f425b68aedd5e8955\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"345c0dbf3a30872d9b204db96b5857cd00808cae\",\"lessThan\":\"ee0c5277d4fab920bd31345c49e193ecede9ecef\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"345c0dbf3a30872d9b204db96b5857cd00808cae\",\"lessThan\":\"3039d8b8692408438a618fac2776b629852663c3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"51890201da4d654f6ca131bc45a0e892bb10de1d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"7eff961ca9f364be255d279346517ba0158ec8e3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"a9855260fe8d8680bf8c4f0d8303b696c861e99b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"795762468125a6412c089651e74f780bee154118\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"2fd4629de51974002f4e9cf1a35a1926dd6c9d99\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"3.16.85\",\"lessThan\":\"3.17\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.4.221\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.9.221\",\"lessThan\":\"4.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.14.178\",\"lessThan\":\"4.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"4.19.73\",\"lessThan\":\"4.20\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"fs/ext4/super.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"5.2\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"5.2\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.104\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.21\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.2.8\",\"lessThanOrEqual\":\"6.2.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.3\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-476\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"5.15.104\",\"matchCriteriaId\":\"0893F7CB-C597-4A3F-AAF9-26B257A3A77F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.16\",\"versionEndExcluding\":\"6.1.21\",\"matchCriteriaId\":\"1F1CA6A9-8F4D-408D-9116-868EC067DCD9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2\",\"versionEndExcluding\":\"6.2.8\",\"matchCriteriaId\":\"4011EC6B-7786-4709-B765-186FA31D6F7F\"}]}]}],\"references\":[{\"url\":\"https://git.kernel.org/stable/c/3039d8b8692408438a618fac2776b629852663c3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/499fef2030fb754c68b1c7cb3a799a3bc1d0d925\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/70e66bdeae4d0f7c8e87762f425b68aedd5e8955\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]},{\"url\":\"https://git.kernel.org/stable/c/ee0c5277d4fab920bd31345c49e193ecede9ecef\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"tags\":[\"Patch\"]}]}}",
    "redhat_vex": {
      "aggregate_severity": "Low",
      "current_release_date": "2026-06-30T10:33:55+00:00",
      "cve": "CVE-2023-53091",
      "id": "CVE-2023-53091",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_affected": "198",
      "product_status:known_not_affected": "76",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ext4: update s_journal_inum if it changes after journal replay",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-53091.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-29T02:09:47Z",
      "cve": "CVE-2023-53091",
      "id": "CVE-2023-53091",
      "initial_release_date": "2025-05-03T02:50:53Z",
      "product_status:known_affected": "539",
      "product_status:known_not_affected": "143",
      "product_status:recommended": "251",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2023-53091",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2023-53091.json",
      "version": "41"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.