CVE-2023-54194
kernel: exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A memory allocation failure was found in the exFAT filesystem driver. When system memory is fragmented, kmalloc_array() can fail to allocate contiguous memory for the bitmap, preventing USB drives from being mounted.
Statement
This is an availability issue affecting exFAT filesystem mounting under memory pressure. The fix uses kvmalloc_array() which falls back to vmalloc when contiguous memory is unavailable. No security boundary is crossed.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-770 · Allocation of Resources Without Limits or Throttling