CVE-2023-53838Missing Synchronization in Linux

Severity
5.5MEDIUM
No vector
EPSS
0.0%
top 90.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedDec 9

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime.

Affected Packages4 packages

Linuxlinux/linux_kernel5.19.06.1.18+1
Debianlinux/linux_kernel< 6.1.20-1+2
CVEListV5linux/linux3db1de0e582c358dd013f3703cd55b5fe4076436102b82708c1523b36d421cb8687746906069bc17+4
debiandebian/linux< linux 6.1.20-1 (bookworm)

🔴Vulnerability Details

3
GHSA
GHSA-qq3x-fvx9-x7fj: In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic wri2025-12-09
OSV
CVE-2023-53838: In the Linux kernel, the following vulnerability has been resolved: f2fs: synchronize atomic write aborts To fix a race condition between atomic write2025-12-09
OSV
f2fs: synchronize atomic write aborts2025-12-09

📋Vendor Advisories

2
Red Hat
kernel: f2fs: synchronize atomic write aborts2025-12-09
Debian
CVE-2023-53838: linux - In the Linux kernel, the following vulnerability has been resolved: f2fs: synch...2023

🕵️Threat Intelligence

1
Wiz
CVE-2023-53838 Impact, Exploitability, and Mitigation Steps | Wiz