Vulnpedia
← All CVEs

CVE-2023-54271

N/A ALL-YEARS

Published 2025-12-30 · Last modified 2026-10-15 · Linux · NVD: Deferred

In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: Fix NULL deref caused by blkg_policy_data being installed before init blk-iocost sometimes causes the following crash: BUG: kernel NULL pointer dereference, address: 00000000000000e0 ... RIP: 0010:_raw_spin_lock+0x17/0x30 Code: be 01 02 00 00 e8 79 38 39 ff 31 d2 89 d0 5d c3 0f 1f 00 0f 1f 44 00 00 55 48 89 e5 65 ff 05 48 d0 34 7e b9 01 00 00 00 31 c0 <f0> 0f b1 0f 75 02 5d c3 89 c6 e8 ea 04 00 00 5d c3 0f 1f 84 00 00 RSP: 0018:ffffc900023b3d40 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 00000000000000e0 RCX: 0000000000000001 RDX: ffffc900023b3d20 RSI: ffffc900023b3cf0 RDI: 00000000000000e0 RBP: ffffc900023b3d40 R08: ffffc900023b3c10 R09: 0000000000000003 R10: 0000000000000064 R11: 000000000000000a R12: ffff888102337000 R13: fffffffffffffff2 R14: ffff88810af408c8 R15: ffff8881070c3600 FS: 00007faaaf364fc0(0000) GS:ffff88842fdc0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000000e0 CR3: 00000001097b1000 CR4: 0000000000350ea0 Call Trace: <TASK> ioc_weight_write+0x13d/0x410 cgroup_file_write+0x7a/0x130 kernfs_fop_write_iter+0xf5/0x170 vfs_write+0x298/0x370 ksys_write+0x5f/0xb0 __x64_sys_write+0x1b/0x20 do_syscall_64+0x3d/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 This happens because iocg->ioc is NULL. The field is initialized by ioc_pd_init() and never cleared. The NULL deref is caused by

LIMITED SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.2%chance of exploitation in 30 days · 12th percentile

○ In CISA KEV○ Catalogued PoC

Impact if exploited

—CVSS · not scored

  • No impact metrics

Proof of concept

No public PoC is currently catalogued.

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Affected

Vendors Linux Siemens

Products Linux Simatic S7 1500 Tm Mfp Gnu/Linux Subsystem

Weakness (CWE)

Not classified.

CVSS vector

Not yet scored.

References and research data (JSON)

Vendor product assessments

Showing 32 of 476 vendor product statements; 444 omitted. Read the full vendor advisory.

  • bpftool-debuginfo-0:7.4.0-503.11.1.el9_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-debuginfo-common-s390x-0:5.14.0-503.11.1.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • perf-0:5.14.0-503.11.1.el9_5.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-0:5.14.0-503.11.1.el9_5.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-debug-debuginfo-0:5.14.0-503.11.1.el9_5.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=aarch64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-modules-0:5.14.0-503.11.1.el9_5.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-zfcpdump-core-0:5.14.0-503.11.1.el9_5.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=s390x

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-debug-debuginfo-0:5.14.0-503.11.1.el9_5.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • libperf-debuginfo-0:5.14.0-503.11.1.el9_5.ppc64le as a component of Red Hat CodeReady Linux Builder (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=ppc64le

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-modules-0:5.14.0-503.11.1.el9_5.x86_64 as a component of Red Hat Enterprise Linux Real Time for NFV (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • python3-perf-debuginfo-0:5.14.0-503.11.1.el9_5.x86_64 as a component of Red Hat Enterprise Linux Real Time (v. 9) · fixed

    Vendor assessment for this product only.

    pkg:rpm/redhat/[email protected]_5?arch=x86_64

    • vendor fix: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. Vendor guidance
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel

    • no fix planned: Out of support scope
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-headers as a component of Red Hat Enterprise Linux 6 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-headers

    • no fix planned: Out of support scope
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-abi-whitelists as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-abi-whitelists

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-debug-modules-internal as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-debug-modules-internal

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-devel as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-devel

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-tools as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-tools

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-zfcpdump-modules-internal as a component of Red Hat Enterprise Linux 8 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-zfcpdump-modules-internal

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-debug-devel as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-debug-devel

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-devel-matched as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt-devel-matched

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt.src as a component of Red Hat Enterprise Linux 9 · known affected

    Vendor assessment for this product only.

    pkg:rpm/redhat/kernel-rt?arch=src

    • none available: Fix deferred
    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-headers-0:5.14.0-503.11.1.el9_5.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/[email protected]_5?arch=aarch64

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-64k-debug-core as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-64k-debug-core

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-debug as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-debug

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-modules-core as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-modules-core

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-64k-devel as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-64k-devel

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-kvm as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-kvm

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-zfcpdump-devel-matched as a component of Red Hat Enterprise Linux 10 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-zfcpdump-devel-matched

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-abi-whitelists as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-abi-whitelists

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • kernel-rt-devel as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/kernel-rt-devel

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00
  • python-perf as a component of Red Hat Enterprise Linux 7 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:rpm/redhat/python-perf

    Red Hat · CVE-2023-54271 · Updated 2026-07-08T12:19:44+00:00

References

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS