CVE-2023-53622
published 2025-10-07CVE-2023-53622: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of…
PriorityP429high7CVSS 3.1
AVLACHPRLUINSUCHIHAH
EPSS
0.14%
3.4th percentile
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd_secs of the struct gfs2_tune are accessed
without holding the lock gt_spin in gfs2_show_options():
val = sdp->sd_tune.gt_logd_secs;
if (val != 30)
seq_printf(s, ",commit=%d", val);
And thus can cause data races when gfs2_show_options() and other functions
such as gfs2_reconfigure() are concurrently executed:
spin_lock(>->gt_spin);
gt->gt_logd_secs = newargs->ar_commit;
To fix these possible data races, the lock sdp->sd_tune.gt_spin is
acquired before accessing the fields of gfs2_tune and released after these
accesses.
Further changes by Andreas:
- Don't hold the spin lock over the seq_printf operations.
Affected
21 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | linux | < linux 6.1.52-1 (bookworm) | linux 6.1.52-1 (bookworm) |
| linux | linux | — | — |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < 7e5bbeb7eb813bb2568e1d5d02587df943272e57 | 7e5bbeb7eb813bb2568e1d5d02587df943272e57 |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < 235a5ae73cea29109a3e06f100493f17857e6a93 | 235a5ae73cea29109a3e06f100493f17857e6a93 |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < b4a7ab57effbed42624842f2ab2a49b177c21a47 | b4a7ab57effbed42624842f2ab2a49b177c21a47 |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < 7c5b2649f6a37d45bfb7abf34c9b71d08677139f | 7c5b2649f6a37d45bfb7abf34c9b71d08677139f |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < 85e888150075cb221270b64bf772341fc6bd11d9 | 85e888150075cb221270b64bf772341fc6bd11d9 |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < a4f71523ed2123d63b431cc0cea4e9f363a0f054 | a4f71523ed2123d63b431cc0cea4e9f363a0f054 |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < 42077d4de49e4d9c773c97c42d5383b4899a8f9d | 42077d4de49e4d9c773c97c42d5383b4899a8f9d |
| linux | linux | >= 48c2b613616235d7c97fda5982f50100a6c79166 < 6fa0a72cbbe45db4ed967a51f9e6f4e3afe61d20 | 6fa0a72cbbe45db4ed967a51f9e6f4e3afe61d20 |
| linux | linux_kernel | >= 0 < 5.10.197-1 | 5.10.197-1 |
| linux | linux_kernel | >= 0 < 6.1.52-1 | 6.1.52-1 |
| linux | linux_kernel | >= 0 < 6.4.13-1 | 6.4.13-1 |
| linux | linux_kernel | >= 0 < 6.4.13-1 | 6.4.13-1 |
| linux | linux_kernel | >= 2.6.31 < 4.14.324 | 4.14.324 |
| linux | linux_kernel | >= 4.15 < 4.19.293 | 4.19.293 |
| linux | linux_kernel | >= 4.20 < 5.4.255 | 5.4.255 |
| linux | linux_kernel | >= 5.11 < 5.15.128 | 5.15.128 |
| linux | linux_kernel | >= 5.16 < 6.1.47 | 6.1.47 |
| linux | linux_kernel | >= 5.5 < 5.10.192 | 5.10.192 |
| linux | linux_kernel | >= 6.2 < 6.4.12 | 6.4.12 |
CVSS provenance
nvdv3.17.0HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
osv7.0HIGH
vendor_debian7.0HIGH
vendor_redhat7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Linux Kernel up to 6.4.11 gfs2 gfs2_show_options race condition (Nessus ID 302727 / WID-SEC-2025-2229)
vuldb·2026-04-20·CVSS 7.0
CVE-2023-53622 [HIGH] Linux Kernel up to 6.4.11 gfs2 gfs2_show_options race condition (Nessus ID 302727 / WID-SEC-2025-2229)
A vulnerability was found in Linux Kernel up to 6.4.11. It has been classified as critical. This vulnerability affects the function gfs2_show_options of the component gfs2. This manipulation causes race condition.
This vulnerability is handled as CVE-2023-53622. The attack can only be done within the local network. There is not any exploit available.
Upgrading the affected component is recommended.
GHSA
GHSA-7fh7-rm8f-wj9x: In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd
ghsa_unreviewed·2025-10-07
CVE-2023-53622 [HIGH] CWE-362 GHSA-7fh7-rm8f-wj9x: In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd_secs of the struct gfs2_tune are accessed
without holding the lock gt_spin in gfs2_show_options():
val = sdp->sd_tune.gt_logd_secs;
if (val != 30)
seq_printf(s, ",commit=%d", val);
And thus can cause data races when gfs2_show_options() and other functions
such as gfs2_reconfigure() are concurrently executed:
spin_lock(>->gt_spin);
gt->gt_logd_secs = newargs->ar_commit;
To fix these possible data races, the lock sdp->sd_tune.gt_spin is
acquired before accessing the fields of gfs2_tune and released after these
accesses.
Further changes by Andreas:
- Don't hold the spin lock over the seq_printf operations.
OSV
CVE-2023-53622: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_s
osv·2025-10-07·CVSS 7.0
CVE-2023-53622 [HIGH] CVE-2023-53622: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_s
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options(): val = sdp->sd_tune.gt_logd_secs; if (val != 30) seq_printf(s, ",commit=%d", val); And thus can cause data races when gfs2_show_options() and other functions such as gfs2_reconfigure() are concurrently executed: spin_lock(>->gt_spin); gt->gt_logd_secs = newargs->ar_commit; To fix these possible data races, the lock sdp->sd_tune.gt_spin is acquired before accessing the fields of gfs2_tune and released after these accesses. Further changes by Andreas: - Don't hold the spin lock over the seq_printf operations.
Red Hat
kernel: gfs2: Fix possible data races in gfs2_show_options()
vendor_redhat·2025-10-07·CVSS 7.0
CVE-2023-53622 [HIGH] CWE-820 kernel: gfs2: Fix possible data races in gfs2_show_options()
kernel: gfs2: Fix possible data races in gfs2_show_options()
In the Linux kernel, the following vulnerability has been resolved:
gfs2: Fix possible data races in gfs2_show_options()
Some fields such as gt_logd_secs of the struct gfs2_tune are accessed
without holding the lock gt_spin in gfs2_show_options():
val = sdp->sd_tune.gt_logd_secs;
if (val != 30)
seq_printf(s, ",commit=%d", val);
And thus can cause data races when gfs2_show_options() and other functions
such as gfs2_reconfigure() are concurrently executed:
spin_lock(>->gt_spin);
gt->gt_logd_secs = newargs->ar_commit;
To fix these possible data races, the lock sdp->sd_tune.gt_spin is
acquired before accessing the fields of gfs2_tune and released after these
accesses.
Further changes by Andreas:
- Don't hold the spin lock over the s
Debian
CVE-2023-53622: linux - In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix p...
vendor_debian·2023·CVSS 7.0
CVE-2023-53622 [HIGH] CVE-2023-53622: linux - In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix p...
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix possible data races in gfs2_show_options() Some fields such as gt_logd_secs of the struct gfs2_tune are accessed without holding the lock gt_spin in gfs2_show_options(): val = sdp->sd_tune.gt_logd_secs; if (val != 30) seq_printf(s, ",commit=%d", val); And thus can cause data races when gfs2_show_options() and other functions such as gfs2_reconfigure() are concurrently executed: spin_lock(>->gt_spin); gt->gt_logd_secs = newargs->ar_commit; To fix these possible data races, the lock sdp->sd_tune.gt_spin is acquired before accessing the fields of gfs2_tune and released after these accesses. Further changes by Andreas: - Don't hold the spin lock over the seq_printf operations.
Scope: local
bookworm: resolved (fixed i
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/235a5ae73cea29109a3e06f100493f17857e6a93https://git.kernel.org/stable/c/42077d4de49e4d9c773c97c42d5383b4899a8f9dhttps://git.kernel.org/stable/c/6fa0a72cbbe45db4ed967a51f9e6f4e3afe61d20https://git.kernel.org/stable/c/7c5b2649f6a37d45bfb7abf34c9b71d08677139fhttps://git.kernel.org/stable/c/7e5bbeb7eb813bb2568e1d5d02587df943272e57https://git.kernel.org/stable/c/85e888150075cb221270b64bf772341fc6bd11d9https://git.kernel.org/stable/c/a4f71523ed2123d63b431cc0cea4e9f363a0f054https://git.kernel.org/stable/c/b4a7ab57effbed42624842f2ab2a49b177c21a47
2025-10-07
Published