Riskcovery

CVE-2023-54272

fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()

State
Published
Severity
Not scored
Published
Dec 30, 2025
Updated
May 11, 2026
Reserved
Dec 30, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: Fix a possible null-pointer dereference in ni_clear()

In a previous commit c1006bd13146, ni->mi.mrec in ni_write_inode() could be NULL, and thus a NULL check is added for this variable.

However, in the same call stack, ni->mi.mrec can be also dereferenced in ni_clear():

ntfs_evict_inode(inode) ni_write_inode(inode, ...) ni = ntfs_i(inode); is_rec_inuse(ni->mi.mrec) -> Add a NULL check by previous commit ni_clear(ntfs_i(inode)) is_rec_inuse(ni->mi.mrec) -> No check

Thus, a possible null-pointer dereference may exist in ni_clear(). To fix it, a NULL check is added in this function.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 20f9bfc664d6a478f9a5bbc0c380f80f7a1a06c6Affected
  • 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 39c6312009574ca73865354133ca222e7753a71bAffected
  • 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before e7675f85a92233136c630000a0b7cf97826705daAffected
  • 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before ec275bf9693d19cc0fdce8436f4c425ced86f6e7Affected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 5.15.113 through 5.15.*Not affected
  • 6.1.81 through 6.1.*Not affected
  • 6.3.4 through 6.3.*Not affected
  • 6.4 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.