High 7.8Published Dec 24, 2025

CVE-2023-54140nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse

Updated under an hour ago (Oct 27, 2026, 10:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse A syzbot stress test using a corrupted disk image reported that mark_buffer_dirty() called from __nilfs_mark_inode_dirty() or nilfs_palloc_commit_alloc_entry() may output a kernel warning, and can panic if the kernel is booted with panic_on_warn. This is because nilfs2 keeps buffer pointers in local structures for some metadata and reuses them, but such buffers may be forcibly discarded by nilfs_clear_dirty_page() in some critical situations. This issue is reported to appear after commit 28a65b49eb53 ("nilfs2: do not write dirty data after degenerating to read-only"), but the issue has potentially existed before. Fix this issue by checking the uptodate flag when attempting to reuse an internally held buffer, and reloading the metadata instead of reusing the buffer if the flag was lost.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8c26c4e2694a163d525976e804d81cd955bbb40c before 473795610594f261e98920f0945550314df36f07; from 8c26c4e2694a163d525976e804d81cd955bbb40c before d95e403588738c7ec38f52b9f490b15e7745d393; from 8c26c4e2694a163d525976e804d81cd955bbb40c before 99a73016a5e12a09586a96f998e91f9ea145cd00; from 8c26c4e2694a163d525976e804d81cd955bbb40c before f1d637b63d8a27ac3386f186a694907f2717fc13; from 8c26c4e2694a163d525976e804d81cd955bbb40c before b911bef132a06de01a745c6a24172d6db7216333; 8c26c4e2694a163d525976e804d81cd955bbb40c builds before 4da07e958bfda2d69d83db105780e8916e3ac02e; from 8c26c4e2694a163d525976e804d81cd955bbb40c before 46c11be2dca295742a5508ea910a77f7733fb7f4; from 8c26c4e2694a163d525976e804d81cd955bbb40c before b308b3eabc429649b5501d36290cea403fbd746c; and 1 more ranges	CNA record

References

References

https://git.kernel.org/stable/c/473795610594f261e98920f0945550314df36f07
https://git.kernel.org/stable/c/d95e403588738c7ec38f52b9f490b15e7745d393
https://git.kernel.org/stable/c/99a73016a5e12a09586a96f998e91f9ea145cd00
https://git.kernel.org/stable/c/f1d637b63d8a27ac3386f186a694907f2717fc13
https://git.kernel.org/stable/c/b911bef132a06de01a745c6a24172d6db7216333
https://git.kernel.org/stable/c/4da07e958bfda2d69d83db105780e8916e3ac02e
https://git.kernel.org/stable/c/46c11be2dca295742a5508ea910a77f7733fb7f4
https://git.kernel.org/stable/c/b308b3eabc429649b5501d36290cea403fbd746c
https://git.kernel.org/stable/c/cdaac8e7e5a059f9b5e816cda257f08d0abffacd

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.