CVE-2023-54185: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54185 is a vulnerability in the Linux kernel's Btrfs filesystem subsystem, specifically in the add_new_free_space() function, where improper use of BUG_ON() macros could cause a kernel panic (system crash) upon memory allocation failures. The fix removes these BUG_ON() calls and replaces them with proper error propagation, allowing callers to handle failures gracefully. It was published on December 30, 2025, and affects Linux kernel versions prior to 6.1.45 and 6.4.10, with the fix included in 6.5 (Feedly, ENISA EUVD). No CVSS base score has been assigned (scored 0.0) (Feedly).

The root cause is the use of BUG_ON() macros in the add_new_free_space() function within the Btrfs in-memory free space cache management code (CWE classification relates to improper error handling). When adding free space to the in-memory cache fails — most commonly due to -ENOMEM (out-of-memory conditions) — the BUG_ON() triggers an unconditional kernel panic rather than returning the error to the caller. The fix refactors add_new_free_space() to return errors directly and accepts an optional u64 pointer argument to report the total amount of added free space, enabling all callers in the call chain to handle errors appropriately (Feedly, ENISA EUVD).

The primary impact is a denial of service: under rare but possible memory pressure conditions, the kernel will panic (crash) when the Btrfs filesystem attempts to update its in-memory free space cache and encounters a memory allocation failure. This results in a complete system outage for any host running an affected kernel with Btrfs-formatted volumes. There is no known confidentiality or integrity impact, and the vulnerability is not exploitable for privilege escalation or remote code execution (Feedly).

Update the Linux kernel to version 6.1.45 or later (for the 6.1.x stable branch), 6.4.10 or later (for the 6.4.x stable branch), or 6.5 or later. The fixes are available via the upstream stable kernel commits: 23e72231f828 (6.1.x branch), f775ceb0cb53 (6.4.x branch), and d8ccbd21918f (mainline/6.5) (ENISA EUVD). As a temporary workaround, avoiding Btrfs under extreme memory pressure or ensuring adequate system memory may reduce the likelihood of triggering the bug, but patching is the only definitive remediation.