CVE-2023-53861

A NULL pointer dereference vulnerability was found in the ext4 filesystem in the Linux kernel. In ext4_mb_good_group(), the group corruption check accesses the grp structure memory before verifying that grp is not NULL. If grp is NULL, this leads to a kernel crash. The fix adds a NULL check before performing the corruption check.

This is a NULL pointer dereference in ext4's multiblock allocator that can cause a kernel crash. The vulnerability requires specific filesystem conditions to trigger and affects systems using ext4.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.