CVE-2023-53845

Not scored yetLast modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix infinite loop in nilfs_mdt_get_block()

If the disk image that nilfs2 mounts is corrupted and a virtual block address obtained by block lookup for a metadata file is invalid, nilfs_bmap_lookup_at_level() may return the same internal return code as -ENOENT, meaning the block does not exist in the metadata file.

This duplication of return codes confuses nilfs_mdt_get_block(), causing it to read and create a metadata block indefinitely.

In particular, if this happens to the inode metadata file, ifile, semaphore i_rwsem can be left held, causing task hangs in lock_mount.

Fix this issue by making nilfs_bmap_lookup_at_level() treat virtual block address translation failures with -ENOENT as metadata corruption instead of returning the error code.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= bdb265eae08db578e7cf5739be16f389d495fc75, < cfb0bb4fbd40c1f06da7e9f88c0a2d46155b90c2; >= bdb265eae08db578e7cf5739be16f389d495fc75, < d536f9976bb04e9c84cf80045a9355975e418f41; >= bdb265eae08db578e7cf5739be16f389d495fc75, < fe1cbbcb1a2532ee1654e1ff121be8906d83c6f0; >= bdb265eae08db578e7cf5739be16f389d495fc75, < 8a89d36a07afe1ed4564df51fefa2bb556c85412; >= bdb265eae08db578e7cf5739be16f389d495fc75, < 8d07d9119642ba43d21f8ba64d51d01931096b20; >= bdb265eae08db578e7cf5739be16f389d495fc75, < 25457d07c8146e57d28906c663def033dc425af6; >= bdb265eae08db578e7cf5739be16f389d495fc75, < 34c5f17222b50c79848bb03ec8811648813e6a45; >= bdb265eae08db578e7cf5739be16f389d495fc75, < 5b29661669cb65b9750a3cf70ed3eaf947b92167; >= bdb265eae08db578e7cf5739be16f389d495fc75, < a6a491c048882e7e424d407d32cba0b52d9ef2bf
LinuxLinux2.6.30

References

Timeline

Published
Dec 9, 2025
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-538467.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on direct node in truncate_dnode() syzbotCVE-2023-53847In the Linux kernel, the following vulnerability has been resolved: usb-storage: alauda: Fix uninit-value in alauda_check_media() Syzbot gCVE-2023-53848In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fix a deadlock in r5l_exit_log() Commit b13015af94cf (CVE-2023-53849In the Linux kernel, the following vulnerability has been resolved: drm/msm: fix workqueue leak on bind errors Make sure to destroy the woCVE-2023-53854.3The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the fnsf_cCVE-2023-53850In the Linux kernel, the following vulnerability has been resolved: iavf: use internal state to free traffic IRQs If the system tries to cCVE-2023-538518.4In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Drop aux devices together with DP controller Using devres CVE-2023-53852In the Linux kernel, the following vulnerability has been resolved: nvme-core: fix memory leak in dhchap_secret_store Free dhchap_secret iCVE-2023-53853In the Linux kernel, the following vulnerability has been resolved: netlink: annotate accesses to nlk->cb_running Both netlink_recvmsg() aCVE-2023-53854In the Linux kernel, the following vulnerability has been resolved: ASoC: mediatek: mt8186: Fix use-after-free in driver remove path When CVE-2023-53855In the Linux kernel, the following vulnerability has been resolved: net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on CVE-2023-53856In the Linux kernel, the following vulnerability has been resolved: of: overlay: Call of_changeset_init() early When of_overlay_fdt_apply(