PT-2025-41062 · Linux+3 · Linux Kernel+3

Published 2025-10-07 · Updated 2026-03-14 · CVE-2023-53618

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to the BTRFS file system. Specifically, the issue involves the handling of reloc trees, which are used for managing shared tree blocks between subvolumes. The system incorrectly allows reloc trees to be created for non-subvolume trees, leading to a mismatch and potential system crash when attempting to merge trees. This can occur due to corrupted on-disk data. The issue was identified through Syzbot crash reports and addressed by rejecting invalid reloc tree root keys and adding checks within the tree-checker utility.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2023-53618

SUSE-SU-2025:21040-1

SUSE-SU-2025:21052-1

SUSE-SU-2025:21056-1

SUSE-SU-2025:21064-1

SUSE-SU-2025:4057-1

SUSE-SU-2025:4128-1

SUSE-SU-2025:4132-1

SUSE-SU-2025:4140-1

SUSE-SU-2025:4141-1

SUSE-SU-2025:4301-1

Affected Products

Btrfs

Debian

Linux Kernel

Suse

References · 1012

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53618.json · Exploit
• https://git.kernel.org/stable/c/3ae93b316ca4b8b3c33798ef1d210355f2fb9318 · Patch
• https://git.kernel.org/stable/c/6ebcd021c92b8e4b904552e4d87283032100796d · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4301-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:4128-1 · Vendor Advisory
• https://git.kernel.org/stable/c/84256e00eeca73c529fc6196e478cc89b8098157 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2025:4141-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-53618 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53618 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53618 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:21052-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-53618 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2025:4057-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-53618 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2023-53618 · Vendor Advisory