CVE-2023-54313: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54313 is a null pointer dereference vulnerability in the Linux kernel's OverlayFS (ovl) subsystem, specifically in the ovl_get_acl_rcu() function. The flaw arises from a race condition during RCU (Read-Copy-Update) path permission checks when an overlayfs inode is concurrently destroyed. It was published on December 30, 2025, and affects the Linux kernel (vendor: linux, product: kernel). The CVSS category is estimated as Medium, with an EPSS score of approximately 0.018% (Feedly, CVE.org).

The root cause is a race condition (CWE-362) combined with a null pointer dereference (CWE-476) in the OverlayFS layer of the Linux kernel. During an RCU-mode permission check (inode_permission(rcu) → ovl_permission → acl_permission_check → get_cached_acl_rcu → ovl_get_inode_acl), a concurrent process can drop the overlayfs dentry cache (drop_cache → __dentry_kill → iput → ovl_destroy_inode → dput(oi->__upperdentry) → dentry_unlink_inode), setting upperdentry->d_inode = NULL. When the first process then calls d_inode(upperdentry) and subsequently IS_POSIXACL(realinode), it dereferences a NULL pointer, triggering a kernel panic. The crash manifests as: BUG: kernel NULL pointer dereference, address: 0000000000000028 at do_ovl_get_acl+0x5d/0x300 (Feedly).

Successful triggering of this vulnerability causes a kernel NULL pointer dereference, resulting in a kernel panic (BUG) and system crash, directly impacting availability. The vulnerability is local in nature and can be triggered by an unprivileged user performing filesystem operations (e.g., running ls) on an overlayfs mount while another process concurrently drops the dentry cache. There is no direct confidentiality or integrity impact, but a system crash can lead to denial of service and potential data loss if in-flight I/O is interrupted (Feedly).

• Logs: Kernel log entries containing BUG: kernel NULL pointer dereference, address: 0000000000000028 and call traces referencing do_ovl_get_acl, ovl_get_inode_acl, get_cached_acl_rcu, generic_permission in dmesg or /var/log/kern.log.
• Process: Unexpected system crashes or kernel panics occurring during filesystem operations (e.g., ls) on overlayfs mounts, particularly under concurrent workloads involving dentry cache invalidation.

The Linux kernel maintainers have issued fixes via stable tree commits. The relevant patches are available at the following kernel.org stable commits: c4a5fb1ae5d3, d536af163c53, d97481c7b273, and f4e19e595cc2. Users should update to a patched kernel version that includes these fixes. As a workaround, avoiding the use of overlayfs (e.g., in container runtimes) on affected kernel versions can reduce exposure until a patched kernel is deployed (CVE.org, kernel.org).