CVE-2023-53149

Source
https://cve.org/CVERecord?id=CVE-2023-53149
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53149.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-53149
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (3)
RHSA (1)
ROOT (3)
SUSE (5)
UBUNTU (1)
Related
Published
2025-09-15T14:03:13Z
Modified
2026-11-07T02:31:07Z
Summary
ext4: avoid deadlock in fs reclaim with page writeback
Details

In the Linux kernel, the following vulnerability has been resolved:

ext4: avoid deadlock in fs reclaim with page writeback

Ext4 has a filesystem wide lock protecting ext4_writepages() calls to avoid races with switching of journalled data flag or inode format. This lock can however cause a deadlock like:

CPU0 CPU1

ext4_writepages() percpu_down_read(sbi->s_writepages_rwsem); ext4_change_inode_journal_flag() percpu_down_write(sbi->s_writepages_rwsem); - blocks, all readers block from now on ext4_do_writepages() ext4_init_io_end() kmem_cache_zalloc(io_end_cachep, GFP_KERNEL) fs_reclaim frees dentry... dentry_unlink_inode() iput() - last ref => iput_final() - inode dirty => write_inode_now()... ext4_writepages() tries to acquire sbi->s_writepages_rwsem and blocks forever

Make sure we cannot recurse into filesystem reclaim from writeback code to avoid the deadlock.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53149.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c8585c6fcaf2011de54c3592e80a634a2b9e1a7f
Fixed
385b49a1f34b26f62e3834c773560b120825b6f8
Fixed
2ec97dc90df40c50e509809dc9a198638a7e18b6
Fixed
4b4340bf04ce9a52061f15000ecedd126abc093c
Fixed
00d873c17e29cc32d90ca852b82685f1673acaa5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53149.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.7.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.2.16
Type
ECOSYSTEM
Events
Introduced
6.3.0
Fixed
6.3.3

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53149.json"