PT-2025-18853 · Linux+5 · Linux Kernel+5

Published 2023-02-18 · Updated 2026-01-28 · CVE-2023-53089

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the fixed version

Description A hung task problem was reported in the Linux kernel, specifically in the ext4 file system. The issue occurs when an inode contains an xattr entry with an ea inum of 15 while cleaning up an orphan inode. This results in an infinite loop, causing a task to hang. The problem arises from the reference counting of the corresponding EA inode being decreased when evicting the inode, leading to a wait for the EA inode to complete deletion. This issue can be resolved by checking whether the ino of the EA inode and parent is the same before getting the EA inode.

Recommendations For Linux kernel versions prior to the fixed version, update to the latest version to resolve the issue. As a temporary workaround, consider disabling the ext4 file system or restricting its use until a patch is available.

Exploit

Fix

DoS

Infinite Loop

Improper Resource Release

Weakness Enumeration

CWE-835

CWE-404

Related Identifiers

ALSA-2025_16880

BDU:2026-04629

CESA-2024_3138

CVE-2023-53089

RHSA-2023:6583

RHSA-2023_6583

RHSA-2024:3138

RHSA-2024_3138

SUSE-SU-2025:01918-1

SUSE-SU-2025:01966-1

SUSE-SU-2025:02173-1

SUSE-SU-2025:02262-1

SUSE-SU-2025:2173-1

SUSE-SU-2025_02173-1

SUSE-SU-2025_02262-1

Affected Products

Astra Linux

Centos

Linux Kernel

Red Hat

Red Os

Suse

References · 462

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53089.json · Exploit
• https://git.kernel.org/stable/c/64b72f5e7574020dea62ab733d88a54d903c42a1 · Patch
• https://git.kernel.org/stable/c/efddc7e106fdf8d1f62d45e79de78f63b7c04fba · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-53089 · Security Note
• https://git.kernel.org/stable/c/0f7bfd6f8164be32dbbdf36aa1e5d00485c53cd7 · Patch
• https://git.kernel.org/stable/c/1aec41c98cce61d19ce89650895e51b9f3cdef13 · Patch
• https://git.kernel.org/stable/c/94fd091576b12540924f6316ebc0678e84cb2800 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2023-53089 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:01966-1 · Vendor Advisory
• https://git.kernel.org/stable/c/a98160d8f3e6242ca9b7f443f26e7ef3a61ba684 · Patch
• https://osv.dev/vulnerability/CVE-2023-53089 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-04629 · Security Note
• https://git.kernel.org/stable/c/2c96c52aeaa6fd9163cfacdd98778b4a0398ef18 · Patch
• https://git.kernel.org/stable/c/73f7987fe1b82596f1a380e85cd0097ebaae7e01 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-53089 · Vendor Advisory