Riskcovery

CVE-2023-53457

FS: JFS: Fix null-ptr-deref Read in txBegin

State
Published
Severity
Not scored
Published
Oct 1, 2025
Updated
May 11, 2026
Reserved
Sep 17, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

FS: JFS: Fix null-ptr-deref Read in txBegin

Syzkaller reported an issue where txBegin may be called on a superblock in a read-only mounted filesystem which leads to NULL pointer deref. This could be solved by checking if the filesystem is read-only before calling txBegin, and returning with appropiate error code.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a7225e9e09519deb7e0c42eb6070029cc456e84dAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b4c144767736221cad92c132f72b3c6ed06a0eaAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a7d17d6bd7cd4f6940b335ea7a6fce5b6d22adc2Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2a3f20efe6c901d4c0871cfd1d8c65e2ade71fc1Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e94d0d378d2754b26fc54b429582553f7b53e15Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 3e5eb6c5ecd8ddb9cfea751cf30f9e23eac97ca3Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fd2db13fb72ff18c633a48229589d42ceb89d1f8Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 47cfdc338d674d38f4b2f22b7612cc6a2763ba27Affected
LinuxLinux
  • 2.6.12Affected
  • before 2.6.12Not affected
  • 4.14.324 through 4.14.*Not affected
  • 4.19.293 through 4.19.*Not affected
  • 5.4.255 through 5.4.*Not affected
  • 5.10.192 through 5.10.*Not affected
  • 5.15.123 through 5.15.*Not affected
  • 6.1.42 through 6.1.*Not affected
  • 6.4.7 through 6.4.*Not affected
  • 6.5 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.