CVE-2023-53081
published 2025-05-02CVE-2023-53081: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into…
PriorityP339high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.19%
8.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix data corruption after failed write
When buffered write fails to copy data into underlying page cache page,
ocfs2_write_end_nolock() just zeroes out and dirties the page. This can
leave dirty page beyond EOF and if page writeback tries to write this page
before write succeeds and expands i_size, page gets into inconsistent
state where page dirty bit is clear but buffer dirty bits stay set
resulting in page data never getting written and so data copied to the
page is lost. Fix the problem by invalidating page beyond EOF after
failed write.
Affected
30 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.25-1 (bookworm) | linux 6.1.25-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | — | — |
| linux | linux | >= 4.14.204 < 4.14.312 | 4.14.312 |
| linux | linux | >= 4.19.155 < 4.19.280 | 4.19.280 |
| linux | linux | >= 4.9.242 < 4.10 | 4.10 |
| linux | linux | >= 5.4.75 < 5.4.240 | 5.4.240 |
| linux | linux | >= 5.9.5 < 5.10 | 5.10 |
| linux | linux | >= 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b < 91d7a4bd5656552d6259e2d0f8859f9e8cc5ef68 | 91d7a4bd5656552d6259e2d0f8859f9e8cc5ef68 |
| linux | linux | >= 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b < a9e53869cb43c96d6d851c491fd4e26430ab6ba6 | a9e53869cb43c96d6d851c491fd4e26430ab6ba6 |
| linux | linux | >= 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b < 47eb055ad3588fc96d34e9e1dd87b210ce62906b | 47eb055ad3588fc96d34e9e1dd87b210ce62906b |
| linux | linux | >= 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b < 205759c6c18f54659b0b5976b14a52d1b3eb9f57 | 205759c6c18f54659b0b5976b14a52d1b3eb9f57 |
| linux | linux | >= 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b < 90410bcf873cf05f54a32183afff0161f44f9715 | 90410bcf873cf05f54a32183afff0161f44f9715 |
| linux | linux | >= 7ce2b16bad2cbfa3fa7bbc42c4448914f639ca47 < c26f3ff4c0be590c1250f945ac2e4fc5fcdc5f45 | c26f3ff4c0be590c1250f945ac2e4fc5fcdc5f45 |
| linux | linux | >= 7ed80e77c908cbaa686529a49f8ae0060c5caee7 < 1629f6f522b2d058019710466a84b240683bbee3 | 1629f6f522b2d058019710466a84b240683bbee3 |
| linux | linux | >= f8a6a2ed4b7d1c3c8631eeb6d00572bc853094a8 < 4c24eb49ab44351424ac8fe8567f91ea48a06089 | 4c24eb49ab44351424ac8fe8567f91ea48a06089 |
| linux | linux_kernel | — | — |
| linux | linux_kernel | >= 0 < 5.10.178-1 | 5.10.178-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 0 < 6.1.25-1 | 6.1.25-1 |
| linux | linux_kernel | >= 4.14.204 < 4.14.312 | 4.14.312 |
| linux | linux_kernel | >= 4.19.155 < 4.19.280 | 4.19.280 |
| linux | linux_kernel | >= 4.9.242 < 4.10 | 4.10 |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.8HIGH
vendor_debian7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: ocfs2: fix data corruption after failed write
vendor_redhat·2025-05-02·CVSS 7.8
CVE-2023-53081 [HIGH] kernel: ocfs2: fix data corruption after failed write
kernel: ocfs2: fix data corruption after failed write
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix data corruption after failed write
When buffered write fails to copy data into underlying page cache page,
ocfs2_write_end_nolock() just zeroes out and dirties the page. This can
leave dirty page beyond EOF and if page writeback tries to write this page
before write succeeds and expands i_size, page gets into inconsistent
state where page dirty bit is clear but buffer dirty bits stay set
resulting in page data never getting written and so data copied to the
page is lost. Fix the problem by invalidating page beyond EOF after
failed write.
Package: kernel (Red Hat Enterprise Linux 10) - Not affected
Package: kernel (Red Hat Enterprise Linux 6) - Not affected
Debian
CVE-2023-53081: linux - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix ...
vendor_debian·2023·CVSS 7.8
CVE-2023-53081 [HIGH] CVE-2023-53081: linux - In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix ...
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2_write_end_nolock() just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page writeback tries to write this page before write succeeds and expands i_size, page gets into inconsistent state where page dirty bit is clear but buffer dirty bits stay set resulting in page data never getting written and so data copied to the page is lost. Fix the problem by invalidating page beyond EOF after failed write.
Scope: local
bookworm: resolved (fixed in 6.1.25-1)
bullseye: resolved (fixed in 5.10.178-1)
forky: resolved (fixed in 6.1.25-1)
sid: resolved (fixed in 6.1.25-1)
trixie: resolv
OSV
CVE-2023-53081: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy da
osv·2025-05-02·CVSS 7.8
CVE-2023-53081 [HIGH] CVE-2023-53081: In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy da
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix data corruption after failed write When buffered write fails to copy data into underlying page cache page, ocfs2_write_end_nolock() just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page writeback tries to write this page before write succeeds and expands i_size, page gets into inconsistent state where page dirty bit is clear but buffer dirty bits stay set resulting in page data never getting written and so data copied to the page is lost. Fix the problem by invalidating page beyond EOF after failed write.
GHSA
GHSA-8gx6-v9p7-fr2f: In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix data corruption after failed write
When buffered write fails to copy
ghsa_unreviewed·2025-05-02
CVE-2023-53081 [HIGH] CWE-787 GHSA-8gx6-v9p7-fr2f: In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix data corruption after failed write
When buffered write fails to copy
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix data corruption after failed write
When buffered write fails to copy data into underlying page cache page,
ocfs2_write_end_nolock() just zeroes out and dirties the page. This can
leave dirty page beyond EOF and if page writeback tries to write this page
before write succeeds and expands i_size, page gets into inconsistent
state where page dirty bit is clear but buffer dirty bits stay set
resulting in page data never getting written and so data copied to the
page is lost. Fix the problem by invalidating page beyond EOF after
failed write.
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/1629f6f522b2d058019710466a84b240683bbee3https://git.kernel.org/stable/c/205759c6c18f54659b0b5976b14a52d1b3eb9f57https://git.kernel.org/stable/c/47eb055ad3588fc96d34e9e1dd87b210ce62906bhttps://git.kernel.org/stable/c/4c24eb49ab44351424ac8fe8567f91ea48a06089https://git.kernel.org/stable/c/90410bcf873cf05f54a32183afff0161f44f9715https://git.kernel.org/stable/c/91d7a4bd5656552d6259e2d0f8859f9e8cc5ef68https://git.kernel.org/stable/c/a9e53869cb43c96d6d851c491fd4e26430ab6ba6https://git.kernel.org/stable/c/c26f3ff4c0be590c1250f945ac2e4fc5fcdc5f45
2025-05-02
Published