Not yet scoredPublished Dec 8, 2025

CVE-2023-53861ext4: correct grp validation in ext4_mb_good_group

Updated under an hour ago (Oct 27, 2026, 8:40 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ext4: correct grp validation in ext4_mb_good_group Group corruption check will access memory of grp and will trigger kernel crash if grp is NULL. So do NULL check before corruption check.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 100c0ad6c04597fefeaaba2bb1827cc015d95067 before 245759d987b617d183061db6ab8886ebb5cc78e9; 620a3c28221bb219b81bc0bffd065cc187494302 builds before 3e24082f16825279054a2b8a5e668d65070bbf07; from b4319e457d6e3fb33e443efeaf4634fc36e8a9ed before 772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d; 5354b2af34064a4579be8bc0e2f15a7b70f14b5f builds before 83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4; from 5354b2af34064a4579be8bc0e2f15a7b70f14b5f before e69d665987db0e37896adf78a7e718f9a0a75d3f; from 5354b2af34064a4579be8bc0e2f15a7b70f14b5f before a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93; 31668cebf45adfb6283e465e641c4f5a21b07afa; from 5.10.181 before 5.10.195; and 3 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/245759d987b617d183061db6ab8886ebb5cc78e9
https://git.kernel.org/stable/c/3e24082f16825279054a2b8a5e668d65070bbf07
https://git.kernel.org/stable/c/772ca4bc1d0d21320ef2ecc0f9e4f90ea85a035d
https://git.kernel.org/stable/c/83a9d5f5ec7e75640b1ba0bbd77a4888df798bb4
https://git.kernel.org/stable/c/e69d665987db0e37896adf78a7e718f9a0a75d3f
https://git.kernel.org/stable/c/a9ce5993a0f5c0887c8a1b4ffa3b8046fbcfdc93

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.