CVE-2023-54135

CVE-2023-54135

High · published December 24, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
5.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()

Check the write offset end bounds before using it as the offset into the

pivot array. This avoids a possible out-of-bounds access on the pivot

array if the write extends to the last slot in the node, in which case the

node maximum should be used as the end pivot.

akpm: this doesn't affect any current callers, but new users of mapletree

may encounter this problem if backported into earlier kernels, so let's

fix it in -stable kernels in case of this.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.5th percentile
Published
2025-12-24T18:16Z
References (4)
EPSS history
Timeline
  • 24 DEC 13:06Z
    maple_tree: fix potential out-of-bounds access in mas_wr_end_piv()
    cvelistv5