{ "cveId": "CVE-2023-54196", "url": "https://patchblox.com/security/cve/CVE-2023-54196", "summary": "CVE-2023-54196 is fixed in 22 products on 1 platform, first by ALAS2023-2024-784, released December 5, 2024. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL pointer dereference in \u0027ni_wr...", "description": "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix NULL pointer dereference in \u0027ni_write_inode\u0027 Syzbot found the following issue: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000016 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=000000010af56000 [0000000000000016] pgd=08000001090da003, p4d=08000001090da003, pud=08000001090ce003, pmd=0000000000000000 Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 3036 Comm: syz-executor206 Not tainted 6.0.0-rc6-syzkaller-17739-g16c9f284e746 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2022 pstate: 80400005 (Nzcv daif \u002BPAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : is_rec_inuse fs/ntfs3/ntfs.h:313 [inline] pc : ni_write_inode\u002B0xac/0x798 fs/ntfs3/frecord.c:3232 lr : ni_write_inode\u002B0xa0/0x798 fs/ntfs3/frecord.c:3226 sp : ffff8000126c3800 x29: ffff8000126c3860 x28: 0000000000000000 x27: ffff0000c8b02000 x26: ffff0000c7502320 x25: ffff0000c7502288 x24: 0000000000000000 x23: ffff80000cbec91c x22: ffff0000c8b03000 x21: ffff0000c8b02000 x20: 0000000000000001 x19: ffff0000c75024d8 x18: 00000000000000c0 x17: ffff80000dd1b198 x16: ffff80000db59158 x15: ffff0000c4b6b500 x14: 00000000000000b8 x13: 0000000000000000 x12: ffff0000c4b6b500 x11: ff80800008be1b60 x10: 0000000000000000 x9 : ffff0000c4b6b500 x8 : 0000000000000000 x7 : ffff800008be1b50 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: is_rec_inuse fs/ntfs3/ntfs.h:313 [inline] ni_write_inode\u002B0xac/0x798 fs/ntfs3/frecord.c:3232 ntfs_evict_inode\u002B0x54/0x84 fs/ntfs3/inode.c:1744 evict\u002B0xec/0x334 fs/inode.c:665 iput_final fs/inode.c:1748 [inline] iput\u002B0x2c4/0x324 fs/inode.c:1774 ntfs_new_inode\u002B0x7c/0xe0 fs/ntfs3/fsntfs.c:1660 ntfs_create_inode\u002B0x20c/0xe78 fs/ntfs3/inode.c:1278 ntfs_create\u002B0x54/0x74 fs/ntfs3/namei.c:100 lookup_open fs/namei.c:3413 [inline] open_last_lookups fs/namei.c:3481 [inline] path_openat\u002B0x804/0x11c4 fs/namei.c:3688 do_filp_open\u002B0xdc/0x1b8 fs/namei.c:3718 do_sys_openat2\u002B0xb8/0x22c fs/open.c:1311 do_sys_open fs/open.c:1327 [inline] __do_sys_openat fs/open.c:1343 [inline] __se_sys_openat fs/open.c:1338 [inline] __arm64_sys_openat\u002B0xb0/0xe0 fs/open.c:1338 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall arch/arm64/kernel/syscall.c:52 [inline] el0_svc_common\u002B0x138/0x220 arch/arm64/kernel/syscall.c:142 do_el0_svc\u002B0x48/0x164 arch/arm64/kernel/syscall.c:206 el0_svc\u002B0x58/0x150 arch/arm64/kernel/entry-common.c:636 el0t_64_sync_handler\u002B0x84/0xf0 arch/arm64/kernel/entry-common.c:654 el0t_64_sync\u002B0x18c/0x190 Code: 97dafee4 340001b4 f9401328 2a1f03e0 (79402d14) ---[ end trace 0000000000000000 ]--- Above issue may happens as follows: ntfs_new_inode mi_init mi-\u003Emrec = kmalloc(sbi-\u003Erecord_size, GFP_NOFS); --\u003Efailed to allocate memory if (!mi-\u003Emrec) return -ENOMEM; iput iput_final evict ntfs_evict_inode ni_write_inode \t is_rec_inuse(ni-\u003Emi.mrec)-\u003E As \u0027ni-\u003Emi.mrec\u0027 is NULL trigger NULL-ptr-deref To solve above issue if new inode failed make inode bad before call \u0027iput()\u0027 in \u0027ntfs_new_inode()\u0027.", "published": "2024-12-05T20:34:00Z", "severity": "important", "epss": 0.00199, "epssPercentile": 0.09797, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "bpftool-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-devel", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-headers", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-libbpf", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-libbpf-devel", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-libbpf-static", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.1.82-99.168", "release": "amzn 2023", "fixedVersion": "1.0-0.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-modules-extra", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-modules-extra-common", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-tools", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "kernel-tools-devel", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.82-1", "fix": "DEBIAN-CVE-2023-54196", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54196", "released": "2025-12-30T13:16:07Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.3.7-1", "fix": "DEBIAN-CVE-2023-54196", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54196", "released": "2025-12-30T13:16:07Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "6.3.7-1", "fix": "DEBIAN-CVE-2023-54196", "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-54196", "released": "2025-12-30T13:16:07Z" }, { "platform": "linux", "product": "perf", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "python3-perf", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" }, { "platform": "linux", "product": "python3-perf-debuginfo", "release": "amzn 2023", "fixedVersion": "6.1.82-99.168.amzn2023", "fix": "ALAS2023-2024-784", "url": "https://patchblox.com/security/fix/linux/alas2023-2024-784", "released": "2024-12-05T20:34:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }