CVE-2023-54069

An integer overflow flaw was found in the Linux kernel's ext4 filesystem. In ext4_mb_new_inode_pa(), when calculating the end position of ext4_free_extent, the computation can overflow ext4_lblk_t (uint32) to zero. This occurs with large logical block numbers near UINT_MAX, causing a BUG_ON assertion failure and kernel crash during block allocation.

This flaw can be triggered through specific file operations involving large sparse files with fallocate. The reproducer requires creating files with extents near the maximum logical block number boundary. While the crash is deterministic once triggered, it requires specific filesystem operations with very large files.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.