CVE catalog

CVE-2023-53149

linux: CVE-2023-53149

[CVE catalog]

Severity
Medium · CVSS 5.8CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.12% · Oct 25, 2026

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid deadlock in fs reclaim with page writeback Ext4 has a filesystem wide lock protecting ext4_writepages() calls to avoid races with switching of journalled data flag or inode format. This lock can however cause a deadlock like: CPU0 CPU1 ext4_writepages() percpu_down_read(sbi->s_writepages_rwsem); ext4_change_inode_journal_flag() percpu_down_write(sbi->s_writepages_rwsem); - blocks, all readers block from now on ext4_do_writepages() ext4_init_io_end() kmem_cache_zalloc(io_end_cachep, GFP_KERNEL) fs_reclaim frees dentry... dentry_unlink_inode() iput() - last ref => iput_final() - inode dirty => write_inode_now()... ext4_writepages() tries to acquire sbi->s_writepages_rwsem and blocks forever Make sure we cannot recurse into filesystem reclaim from writeback code to avoid the deadlock.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlinuxsid7.2.12-1fixed
Debianlinuxforky7.2.12-1fixed
Debianlinuxtrixie6.12.107-1fixed
Debianlinuxtrixie-security6.12.113-1fixed
Debianlinuxbookworm6.1.176-1vulnerable
Debianlinuxbookworm-security6.1.190-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlinuxsourcesid6.3.7-1not yet assignedNot reportedNot reported
Debianlinuxsourceforky6.3.7-1not yet assignedNot reportedNot reported
Debianlinuxsourcetrixie6.3.7-1not yet assignedNot reportedNot reported
Debianlinuxsourcebookworm(unfixed)not yet assignedNot reportedNot reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References