PT-2025-40706 · Ocfs2+3 · Ocfs2+3

Published

2023-02-27

·

Updated

2025-12-04

·

CVE-2023-53564

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw within the OCFS2 file system related to defragmentation. A specific code path, initiated by ocfs2 ioctl move extents, leads to a call stack involving ocfs2 defrag extent and ultimately ocfs2 journal dirty, which can trigger an assertion failure within the jbd2 journaling layer. The root cause is linked to improper handling of journal operations during extent splitting, specifically the unnecessary calls to ocfs2 journal access di() and ocfs2 journal dirty() within ocfs2 move extent(). The issue occurs when jbd2 journal restart() is called by ocfs2 split extent() during defragmentation. The fix involves removing the unnecessary journal access and dirty calls from ocfs2 move extent(), allowing ocfs2 split extent() to manage journal operations independently.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Resource Release

Assertion Failure

Weakness Enumeration

Related Identifiers

BDU:2026-04588
CVE-2023-53564
SUSE-SU-2025:4111-1
SUSE-SU-2025:4135-1
SUSE-SU-2025:4139-1
SUSE-SU-2025:4149-1
SUSE-SU-2025:4188-1
SUSE-SU-2025:4189-1
SUSE-SU-2025:4320-1

Affected Products

Linux Kernel
Ocfs2
Suse
Jbd2