CVE-2023-54317

CVE-2023-54317

High · published December 30, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dm flakey: don't corrupt the zero page

When we need to zero some range on a block device, the function

__blkdev_issue_zero_pages submits a write bio with the bio vector pointing

to the zero page. If we use dm-flakey with corrupt bio writes option, it

will corrupt the content of the zero page which results in crashes of

various userspace programs. Glibc assumes that memory returned by mmap is

zeroed and it uses it for calloc implementation; if the newly mapped

memory is not zeroed, calloc will return non-zeroed memory.

Fix this bug by testing if the page is equal to ZERO_PAGE(0) and

avoiding the corruption in this case.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00155 · 4.2th percentile
Published
2025-12-30T18:16Z
References (8)
EPSS history
Timeline
  • 30 DEC 12:23Z
    dm flakey: don't corrupt the zero page
    cvelistv5