CVE-2023-53091 - CVE House
Back to Database
Status published Unknown CVE-2023-53091

ext4: update s_journal_inum if it changes after journal replay

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after journal replay When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-53091

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux

View All →
CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown 0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown 0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown 0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown 0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown 0

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
345c0dbf3a30872d9b204db96b5857cd00808cae, 51890201da4d654f6ca131bc45a0e892bb10de1d, 7eff961ca9f364be255d279346517ba0158ec8e3, a9855260fe8d8680bf8c4f0d8303b696c861e99b, 795762468125a6412c089651e74f780bee154118, 2fd4629de51974002f4e9cf1a35a1926dd6c9d99, 3.16.85, 4.4.221, 4.9.221, 4.14.178, 4.19.73, 5.2, 0, 5.15.104, 6.1.21, 6.2.8, 6.3

Timeline

Official Publish: May 2nd, 2025
Last Modified: May 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.