PT-2025-49651 · Linux+1 · Linux Kernel+1
Published
2025-12-09
·
Updated
2026-04-20
·
CVE-2023-53791
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.5.0-rc2-00121-g01e55c376936-dirty
Description
The Linux kernel contains an issue related to a holder mismatch within the
export rdev() function in the md (multiple device) subsystem. A warning occurs when claim rdev is used with blkdev get by dev() while rdev is used with blkdev put(). This can happen if mddev->external changes from 0 to 1. The issue is reproducible through a specific test case involving adding and removing devices via sysfs. The test case involves writing to /sys/block/md0/md/new dev and /sys/block/md0/md/dev-${devname}/state. The call trace indicates the issue occurs within the blkdev put() function.Recommendations
Update to Linux kernel version 6.5.0-rc2-00121-g01e55c376936-dirty or later.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat