CVE-2023-53183

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53183
In the Linux kernel, the following vulnerability has been resolved: btrfs: exit gracefully if reloc roots don't match [BUG] Syzbot reported a crash that an ASSERT() got triggered inside prepare_to_merge(). [CAUSE] The root cause of the triggered ASSERT() is we can have a race between quota tree creation and relocation. This leads us to create a duplicated quota tree in the btrfs_read_fs_root() path, and since it's treated as fs tree, it would have ROOT_SHAREABLE flag, causing us to create a reloc tree for it. The bug itself is fixed by a dedicated patch for it, but this already taught us the ASSERT() is not something straightforward for developers. [ENHANCEMENT] Instead of using an ASSERT(), let's handle it gracefully and output extra info about the mismatch reloc roots to help debug. Also with the above ASSERT() removed, we can trigger ASSERT(0)s inside merge_reloc_roots() later. Also replace those ASSERT(0)s with WARN_ON()s.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/05d7ce504545f7874529701664c90814ca645c5d Patch
https://git.kernel.org/stable/c/69dd147de419b04d1d8d2ca67ef424cddd5b8fd5 Patch
https://git.kernel.org/stable/c/9d04716e36654275aea00fb93fc9b30b850925e7 Patch
https://git.kernel.org/stable/c/a96b6519ac71583835cb46d74bc450de5a13877f Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
History

02 Dec 2025, 02:56

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/05d7ce504545f7874529701664c90814ca645c5d - () https://git.kernel.org/stable/c/05d7ce504545f7874529701664c90814ca645c5d - Patch
References () https://git.kernel.org/stable/c/69dd147de419b04d1d8d2ca67ef424cddd5b8fd5 - () https://git.kernel.org/stable/c/69dd147de419b04d1d8d2ca67ef424cddd5b8fd5 - Patch
References () https://git.kernel.org/stable/c/9d04716e36654275aea00fb93fc9b30b850925e7 - () https://git.kernel.org/stable/c/9d04716e36654275aea00fb93fc9b30b850925e7 - Patch
References () https://git.kernel.org/stable/c/a96b6519ac71583835cb46d74bc450de5a13877f - () https://git.kernel.org/stable/c/a96b6519ac71583835cb46d74bc450de5a13877f - Patch
First Time Linux linux Kernel
Linux
CWE CWE-617
CPE cpe:2.3:o:linux:linux_kernel:6.5:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.5:rc1:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
Information

Published : 2025-09-15 14:15

Updated : 2025-12-02 02:56

NVD link : CVE-2023-53183

Mitre link : CVE-2023-53183

CVE.ORG link : CVE-2023-53183

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-617

Reachable Assertion