Is CVE-2023-54124 in the CISA KEV catalog?

No. CVE-2023-54124 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the EPSS score for CVE-2023-54124?

CVE-2023-54124 has an EPSS score of 0.18% (8th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2023-54124?

Upgrade linux on debian 11 to 5.10.191-1 or later.

CVE & CISA-KEV Catalog

CVE-2023-54124

UNSCORED

NVD

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to drop all dirty pages during umount() if cp_error is set xfstest generic/361 reports a bug as below: f2fs_bug_on(sbi, sbi->fsync_node_num); kernel BUG at fs/f2fs/super.c:1627! RIP: 0010:f2fs_put_super+0x3a8/0x3b0 Call Trace: generic_shutdown_super+0x8c/0x1b0 kill_block_super+0x2b/0x60 kill_f2fs_super+0x87/0x110 deactivate_locked_super+0x39/0x80 deactivate_super+0x46/0x50 cleanup_mnt+0x109/0x170 __cleanup_mnt+0x16/0x20 task_work_run+0x65/0xa0 exit_to_user_mode_prepare+0x175/0x190 syscall_exit_to_user_mode+0x25/0x50 do_syscall_64+0x4c/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc During umount(), if cp_error is set, f2fs_wait_on_all_pages() should not stop waiting all F2FS_WB_CP_DATA pages to be writebacked, otherwise, fsync_node_num can be non-zero after f2fs_wait_on_all_pages() causing this bug. In this case, to avoid deadloop in f2fs_wait_on_all_pages(), it needs to drop all dirty pages rather than redirtying them.

How to fix

Remediation Available

linuxDebian

Fixed in:5.10.191-1CVE-2023-54124

Fixed in:6.1.37-1CVE-2023-54124

Fixed in:6.3.7-1CVE-2023-54124

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3.1 Vector

No CVSS vector data available.

Exploit Intelligence

0.18%probability of exploitation in 30 days

8thpercentile

Low risk: more likely to be exploited than 8% of all known CVEs.

References

Other references7

Embed a live status badge for CVE-2023-54124

Markdown

[![CVE-2023-54124](https://tridentstack.com/cve/badge/CVE-2023-54124.svg)](https://tridentstack.com/cve/CVE-2023-54124)

HTML

<a href="https://tridentstack.com/cve/CVE-2023-54124"><img src="https://tridentstack.com/cve/badge/CVE-2023-54124.svg" alt="CVE-2023-54124"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-12-29.