In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
syzbot is reporting hung task at do_user_addr_fault() [1], for there is
a silent deadlock between PG_locked bit and ni_lock lock.
Since filemap_update_page() calls filemap_read_folio() after calling
folio_trylock() which will set PG_locked bit, ntfs_truncate() must not
call truncate_setsize() which will wait for PG_locked bit to be cleared
when holding ni_lock lock.
References
Configurations
Configuration 1 (hide)
|
History
24 Nov 2025, 21:01
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:6.2:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.2:rc2:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/0226635c304cfd5c9db9b78c259cb713819b057e - Patch | |
| References | () https://git.kernel.org/stable/c/6bb6b1c6b0c31e36736b87a39dd1cbbd9d5ec22f - Patch | |
| References | () https://git.kernel.org/stable/c/73fee7e1e5ea11b51c51c46e0577a197ca3602cf - Patch | |
| References | () https://git.kernel.org/stable/c/8414983c2e649364d8af29080a0869266b31abb6 - Patch |
Information
Published : 2025-09-15 14:15
Updated : 2025-11-24 21:01
NVD link : CVE-2023-53163
Mitre link : CVE-2023-53163
CVE.ORG link : CVE-2023-53163
JSON object : View
Products Affected
linux
- linux_kernel
CWE