CVE-2023-54285CWE-787

CVE-2023-54285

High · published December 30, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
7.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iomap: Fix possible overflow condition in iomap_write_delalloc_scan

folio_next_index() returns an unsigned long value which left shifted

by PAGE_SHIFT could possibly cause an overflow on 32-bit system. Instead

use folio_pos(folio) + folio_size(folio), which does this correctly.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00179 · 7.1th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-30T18:16Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.1.92, < 6.1.1626.1.162
linux/linux_kernel≥ 6.2, < 6.5.56.5.5
References (3)
EPSS history
Timeline
  • 30 DEC 12:23Z
    iomap: Fix possible overflow condition in iomap_write_delalloc_scan
    cvelistv5