# CVE-2023-54151: linux: In the Linux kernel, the following vulnerability has been resolved:  f2fs: Fix system crash due to lack of free space...

CVE-2023-54151 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-54151, released December 24, 2025. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2023-54151
- Priority: High
- CVSS: 7.8 (high)
- EPSS: 0.0015
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Dec 24, 2025

## Description

In the Linux kernel, the following vulnerability has been resolved:  f2fs: Fix system crash due to lack of free space in LFS  When f2fs tries to checkpoint during foreground gc in LFS mode, system crash occurs due to lack of free space if the amount of dirty node and dentry pages generated by data migration exceeds free space. The reproduction sequence is as follows.   - 20GiB capacity block device (null_blk)  - format and mount with LFS mode  - create a file and write 20,000MiB  - 4k random write on full range of the file   RIP: 0010:new_curseg+0x48a/0x510 [f2fs]  Code: 55 e7 f5 89 c0 48 0f af c3 48 8b 5d c0 48 c1 e8 20 83 c0 01 89 43 6c 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc <0f> 0b f0 41 80 4f 48 04 45 85 f6 0f 84 ba fd ff ff e9 ef fe ff ff  RSP: 0018:ffff977bc397b218 EFLAGS: 00010246  RAX: 00000000000027b9 RBX: 0000000000000000 RCX: 00000000000027c0  RDX: 0000000000000000 RSI: 00000000000027b9 RDI: ffff8c25ab4e74f8  RBP: ffff977bc397b268 R08: 00000000000027b9 R09: ffff8c29e4a34b40  R10: 0000000000000001 R11: ffff977bc397b0d8 R12: 0000000000000000  R13: ffff8c25b4dd81a0 R14: 0000000000000000 R15: ffff8c2f667f9000  FS: 0000000000000000(0000) GS:ffff8c344ec80000(0000) knlGS:0000000000000000  CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033  CR2: 000000c00055d000 CR3: 0000000e30810003 CR4: 00000000003706e0  DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  Call Trace:  <TASK>  allocate_segment_by_default+0x9c/0x110 [f2fs]  f2fs_allocate_data_block+0x243/0xa30 [f2fs]  ? __mod_lruvec_page_state+0xa0/0x150  do_write_page+0x80/0x160 [f2fs]  f2fs_do_write_node_page+0x32/0x50 [f2fs]  __write_node_page+0x339/0x730 [f2fs]  f2fs_sync_node_pages+0x5a6/0x780 [f2fs]  block_operations+0x257/0x340 [f2fs]  f2fs_write_checkpoint+0x102/0x1050 [f2fs]  f2fs_gc+0x27c/0x630 [f2fs]  ? folio_mark_dirty+0x36/0x70  f2fs_balance_fs+0x16f/0x180 [f2fs]  This patch adds checking whether free sections are enough before checkpoint during gc.  [Jaegeuk Kim: code clean-up]

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 12.15 (bookworm) | 6.1.37-1 | [DEBIAN-CVE-2023-54151](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54151.md) | Dec 24, 2025 |
| Linux | linux Debian 13.5 (trixie) | 6.3.7-1 | [DEBIAN-CVE-2023-54151](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54151.md) | Dec 24, 2025 |
| Linux | linux Debian 14 | 6.3.7-1 | [DEBIAN-CVE-2023-54151](https://patchblox.com/security/data/fix/linux/debian-cve-2023-54151.md) | Dec 24, 2025 |

---

Data as of 2026-11-08T00:53:09Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.