PT-2025-49673 · Ext4+2 · Ext4+2
CVE-2023-53813
·
Published
2023-07-22
·
Updated
2026-03-24
CVSS v2.0
6.0
Medium
| Vector | AV:L/AC:H/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw in the ext4 filesystem related to rbtree traversal within the
ext4 mb use preallocated function. Specifically, the issue arises during memory allocation when searching for preallocated blocks in the per-inode rbtree. A bug exists where parallel deletion of preallocations can cause the traversal to skip entries, leading to a failure when attempting to create a new preallocation that overlaps with a missed one. The fix involves a modified rbtree traversal method to reliably locate suitable preallocations, even in the presence of deleted entries. Additionally, a potential overflow bug in calculating the end of a preallocation has been addressed. The function ext4 mb use preallocated is involved in this issue.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel
Red Hat
Ext4