Not yet scoredPublished Dec 30, 2025

CVE-2023-54305ext4: refuse to create ea block when umounted

Updated under an hour ago (Oct 28, 2026, 1:20 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ext4: refuse to create ea block when umounted The ea block expansion need to access s_root while it is already set as NULL when umount is triggered. Refuse this request to avoid panic.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from e50e5129f384ae282adebfb561189cdb19b81cee before aedea161d031502a423ed1c7597754681a4f8cda; from e50e5129f384ae282adebfb561189cdb19b81cee before 21f6a80d9234422e2eb445734b22c78fc5bf6719; from e50e5129f384ae282adebfb561189cdb19b81cee before a92b67e768bde433b9385cde56c09deb58db269e; from e50e5129f384ae282adebfb561189cdb19b81cee before 0dc0fa313bb4e86382a3e7125429710d44383196; from e50e5129f384ae282adebfb561189cdb19b81cee before 116008ada3d0de4991099edaf6b8c2e9cd6f225a; from e50e5129f384ae282adebfb561189cdb19b81cee before 05cbf6ddd9847c7b4f0662c048f195b09405a9d0; from e50e5129f384ae282adebfb561189cdb19b81cee before a458a8c1d1fc4e10a1813786132b09a3863ad3f2; from e50e5129f384ae282adebfb561189cdb19b81cee before f31173c19901a96bb2ebf6bcfec8a08df7095c91	CNA record

References

References

https://git.kernel.org/stable/c/aedea161d031502a423ed1c7597754681a4f8cda
https://git.kernel.org/stable/c/21f6a80d9234422e2eb445734b22c78fc5bf6719
https://git.kernel.org/stable/c/a92b67e768bde433b9385cde56c09deb58db269e
https://git.kernel.org/stable/c/0dc0fa313bb4e86382a3e7125429710d44383196
https://git.kernel.org/stable/c/116008ada3d0de4991099edaf6b8c2e9cd6f225a
https://git.kernel.org/stable/c/05cbf6ddd9847c7b4f0662c048f195b09405a9d0
https://git.kernel.org/stable/c/a458a8c1d1fc4e10a1813786132b09a3863ad3f2
https://git.kernel.org/stable/c/f31173c19901a96bb2ebf6bcfec8a08df7095c91

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.