Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2023-54317

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
30/12/2025
Última modificación:
30/12/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> dm flakey: don&amp;#39;t corrupt the zero page<br /> <br /> When we need to zero some range on a block device, the function<br /> __blkdev_issue_zero_pages submits a write bio with the bio vector pointing<br /> to the zero page. If we use dm-flakey with corrupt bio writes option, it<br /> will corrupt the content of the zero page which results in crashes of<br /> various userspace programs. Glibc assumes that memory returned by mmap is<br /> zeroed and it uses it for calloc implementation; if the newly mapped<br /> memory is not zeroed, calloc will return non-zeroed memory.<br /> <br /> Fix this bug by testing if the page is equal to ZERO_PAGE(0) and<br /> avoiding the corruption in this case.

Impacto