Log in Start free

Vulnerability · Published Dec 24, 2025 · Assigned by Linux

CVE-2023-54153ext4: turn quotas off if mount failed after enabling quotas

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 94.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ext4: turn quotas off if mount failed after enabling quotas Yi found during a review of the patch "ext4: don't BUG on inconsistent journal feature" that when ext4_mark_recovery_complete() returns an error value, the error handling path does not turn off the enabled quotas, which triggers the following kmemleak: ================================================================ unreferenced object 0xffff8cf68678e7c0 (size 64): comm "mount", pid 746, jiffies 4294871231 (age 11.540s) hex dump (first 32 bytes): 00 90 ef 82 f6 8c ff ff 00 00 00 00 41 01 00 00 ............A... c7 00 00 00 bd 00 00 00 0a 00 00 00 48 00 00 00 ............H... backtrace: [<00000000c561ef24>] __kmem_cache_alloc_node+0x4d4/0x880 [<00000000d4e621d7>] kmalloc_trace+0x39/0x140 [<00000000837eee74>] v2_read_file_info+0x18a/0x3a0 [<0000000088f6c877>] dquot_load_quota_sb+0x2ed/0x770 [<00000000340a4782>] dquot_load_quota_inode+0xc6/0x1c0 [<0000000089a18bd5>] ext4_enable_quotas+0x17e/0x3a0 [ext4] [<000000003a0268fa>] __ext4_fill_super+0x3448/0x3910 [ext4] [<00000000b0f2a8a8>] ext4_fill_super+0x13d/0x340 [ext4] [<000000004a9489c4>] get_tree_bdev+0x1dc/0x370 [<000000006e723bf1>] ext4_get_tree+0x1d/0x30 [ext4] [<00000000c7cb663d>] vfs_get_tree+0x31/0x160 [<00000000320e1bed>] do_new_mount+0x1d5/0x480 [<00000000c074654c>] path_mount+0x22e/0xbe0 [<0000000003e97a8e>] do_mount+0x95/0xc0 [<000000002f3d3736>] __x64_sys_mount+0xc4/0x160 [<0000000027d2140c>] do_syscall_64+0x3f/0x90 ================================================================ To solve this problem, we add a "failed_mount10" tag, and call ext4_quota_off_umount() in this tag to release the enabled qoutas.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.52-1DEBIAN-CVE-2023-54153
Debian:13linux6.4.11-1DEBIAN-CVE-2023-54153
Debian:14linux6.4.11-1DEBIAN-CVE-2023-54153
Ubuntu:22.04:LTSlinux5.15.0-86.96UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-aws5.15.0-1047.52UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure5.15.0-1049.56UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1049.56.1UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-gcp5.15.0-1044.52UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-gke5.15.0-1044.49UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1030.35UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-ibm5.15.0-1040.43UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1043.49UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-kvm5.15.0-1044.49UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-86.95UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1037.37UBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1018.18UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1005.5UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-oracle5.15.0-1045.51UBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-raspi5.15.0-1040.43UBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-54153
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1025.29UBUNTU-CVE-2023-54153

Affected products (as reported)

VendorProductVersions
Linux Linux 11215630aada28307ba555a43138db6ac54fa825 – before c327b83c59ee938792a0300df646efac39c7d6a711215630aada28307ba555a43138db6ac54fa825 – before deef86fa3005cbb61ae8aa5729324c09b3f4ba7311215630aada28307ba555a43138db6ac54fa825 – before 77c3ca1108eb4a26db4f256c42b271a430cebc7d11215630aada28307ba555a43138db6ac54fa825 – before d13f99632748462c32fc95d729f5e754bab0606460e2824ab30a19c7aaf5a3932bc155d18b2cd816a6d49257cbe53c7bca1a0353a6443f53cbed9cc72e7312ddaf629eecf4702b662da477a3bc39c31ad558851e5ff443b020245b7a1a455c55accf740b
Linux Linux 5.9

References