CVE-2023-54021In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by…
Updated under an hour ago ()
Does this affect you?
It lists no affected products yet. Add what you run and Signals checks it as products are added.
No exploitation reported and no EPSS estimate yet.
In the Linux kernel, the following vulnerability has been resolved: ext4: set goal start correctly in ext4_mb_normalize_request We need to set ac_g_ex to notify the goal start used in ext4_mb_find_by_goal. Set ac_g_ex instead of ac_f_ex in ext4_mb_normalize_request. Besides we should assure goal start is in range [first_data_block, blocks_count) as ext4_mb_initialize_context does. [ Added a check to make sure size is less than ar->pright; otherwise we could end up passing an underflowed value of ar->pright - size to ext4_get_group_no_and_offset(), which will trigger a BUG_ON later on. - TYT ]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Deferred
- Record last updated
- Jun 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
No affected products are listed yet.
References
- https://git.kernel.org/stable/c/2479bb6cbdb4d56b807bbe5229e3e26a6f1f4530
- https://git.kernel.org/stable/c/390eee955d4de4662db5e3e9e9a9eae020432cb7
- https://git.kernel.org/stable/c/3ca3005b502ca8ea87d6a344323b179b48c4e4a3
- https://git.kernel.org/stable/c/abb330ffaa3a0ae7ce632e28c9260b461c01f19f
- https://git.kernel.org/stable/c/b07ffe6927c75d99af534d685282ea188d9f71a6
- https://git.kernel.org/stable/c/bc4a3e1d07a86ae5845321d371190244acacb2f2
- https://git.kernel.org/stable/c/c6bee8970075b256fc1b07bf4873049219380818
- https://git.kernel.org/stable/c/cee78217a7ae72d11c2e21e1a5263b8044489823
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.