CVE-2023-54285
kernel: iomap: Fix possible overflow condition in iomap_write_delalloc_scan
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · August 5, 2026
Description
An integer overflow vulnerability was found in the iomap subsystem. On 32-bit systems, calculating folio positions could overflow when large folios are used, potentially causing incorrect delalloc extent scanning.
Statement
This affects 32-bit systems only, which are uncommon in modern deployments. The overflow requires specific memory and filesystem conditions to trigger and would result in incorrect I/O mapping rather than direct security impact.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 2.5CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-190 · Integer Overflow or Wraparound