cbcvebase.
CVE-2023-53848
published 2025-12-09

CVE-2023-53848: In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fix a deadlock in r5l_exit_log() Commit b13015af94cf ("md/raid5-cache…

PriorityP420medium4.7
EPSS
0.22%
13.2th percentile
In the Linux kernel, the following vulnerability has been resolved:

md/raid5-cache: fix a deadlock in r5l_exit_log()

Commit b13015af94cf ("md/raid5-cache: Clear conf->log after finishing
work") introduce a new problem:

// caller hold reconfig_mutex
r5l_exit_log
flush_work(&log->disable_writeback_work)
r5c_disable_writeback_async
wait_event
/*
* conf->log is not NULL, and mddev_trylock()
* will fail, wait_event() can never pass.
*/
conf->log = NULL

Fix this problem by setting 'config->log' to NULL before wake_up() as it
used to be, so that wait_event() from r5c_disable_writeback_async() can
exist. In the meantime, move forward md_unregister_thread() so that
null-ptr-deref this commit fixed can still be fixed.

Affected

12 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.1.55-1 (bookworm)linux 6.1.55-1 (bookworm)
linuxlinux
linuxlinux>= b13015af94cf405f73ff64ce0797269554020c37 < ac9e103f282a7854f3274ef5ff0742fbbe8d7d6bac9e103f282a7854f3274ef5ff0742fbbe8d7d6b
linuxlinux>= b13015af94cf405f73ff64ce0797269554020c37 < 71cf23271f015a57038bdc4669952096f9fe550071cf23271f015a57038bdc4669952096f9fe5500
linuxlinux>= b13015af94cf405f73ff64ce0797269554020c37 < c406984738215dc20ac2dc63e49d70f20797730ec406984738215dc20ac2dc63e49d70f20797730e
linuxlinux>= b13015af94cf405f73ff64ce0797269554020c37 < a705b11b358dee677aad80630e7608b2d5f56691a705b11b358dee677aad80630e7608b2d5f56691
linuxlinux_kernel>= 0 < 6.1.55-16.1.55-1
linuxlinux_kernel>= 0 < 6.5.3-16.5.3-1
linuxlinux_kernel>= 0 < 6.5.3-16.5.3-1
linuxlinux_kernel>= 6.0.0 < 6.1.536.1.53
linuxlinux_kernel>= 6.2.0 < 6.4.166.4.16
linuxlinux_kernel>= 6.5.0 < 6.5.36.5.3
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.