In the Linux kernel, the following vulnerability has been resolved:

ext4: refuse to create ea block when umounted

The ea block expansion need to access s_root while it is
already set as NULL when umount is triggered. Refuse this
request to avoid panic.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00035.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e50e5129f384ae282adebfb561189cdb19b81cee affected < aedea161d031502a423ed1c7597754681a4f8cda
e50e5129f384ae282adebfb561189cdb19b81cee affected < 21f6a80d9234422e2eb445734b22c78fc5bf6719
e50e5129f384ae282adebfb561189cdb19b81cee affected < a92b67e768bde433b9385cde56c09deb58db269e
e50e5129f384ae282adebfb561189cdb19b81cee affected < 0dc0fa313bb4e86382a3e7125429710d44383196
e50e5129f384ae282adebfb561189cdb19b81cee affected < 116008ada3d0de4991099edaf6b8c2e9cd6f225a
e50e5129f384ae282adebfb561189cdb19b81cee affected < 05cbf6ddd9847c7b4f0662c048f195b09405a9d0
e50e5129f384ae282adebfb561189cdb19b81cee affected < a458a8c1d1fc4e10a1813786132b09a3863ad3f2
e50e5129f384ae282adebfb561189cdb19b81cee affected < f31173c19901a96bb2ebf6bcfec8a08df7095c91
Linux Linux affected
Version Status Constraints
4.13 affected —
0 unaffected < 4.13
4.14.308 unaffected ≤ 4.14.*
4.19.276 unaffected ≤ 4.19.*
5.4.235 unaffected ≤ 5.4.*
5.10.173 unaffected ≤ 5.10.*
5.15.99 unaffected ≤ 5.15.*
6.1.16 unaffected ≤ 6.1.*
6.2.3 unaffected ≤ 6.2.*
6.3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/05cbf6ddd9847c7b4f0662c048f195b09405a9d0 cve-icon cve-icon
https://git.kernel.org/stable/c/0dc0fa313bb4e86382a3e7125429710d44383196 cve-icon cve-icon
https://git.kernel.org/stable/c/116008ada3d0de4991099edaf6b8c2e9cd6f225a cve-icon cve-icon
https://git.kernel.org/stable/c/21f6a80d9234422e2eb445734b22c78fc5bf6719 cve-icon cve-icon
https://git.kernel.org/stable/c/a458a8c1d1fc4e10a1813786132b09a3863ad3f2 cve-icon cve-icon
https://git.kernel.org/stable/c/a92b67e768bde433b9385cde56c09deb58db269e cve-icon cve-icon
https://git.kernel.org/stable/c/aedea161d031502a423ed1c7597754681a4f8cda cve-icon cve-icon
https://git.kernel.org/stable/c/f31173c19901a96bb2ebf6bcfec8a08df7095c91 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123034-CVE-2023-54305-68b4@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54305 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54305 cve-icon
History

Wed, 31 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 30 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ext4: refuse to create ea block when umounted The ea block expansion need to access s_root while it is already set as NULL when umount is triggered. Refuse this request to avoid panic.
Title ext4: refuse to create ea block when umounted
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T11:37:19.878Z

Reserved: 2025-12-30T12:06:44.529Z

Link: CVE-2023-54305

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:19.650

Modified: 2025-12-31T20:42:43.210

Link: CVE-2023-54305

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54305 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.