SB20251230215 - NULL pointer dereference in Linux kernel block
Published: December 30, 2025 Updated: December 30, 2025
Security Bulletin ID
SB20251230215
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) NULL pointer dereference (CVE-ID: CVE-2023-54271)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to NULL pointer dereference within the blkcg_activate_policy() function in block/blk-cgroup.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/7d63c6f9765339dcfc34b7365ced7c518012e4fe
- https://git.kernel.org/stable/c/e39ef7880d1057b2ebcdb013405f4d84a257db23
- https://git.kernel.org/stable/c/ec14a87ee1999b19d8b7ed0fa95fea80644624ae
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.4.16
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6