PT-2025-49736 · Linux+1 · Linux Kernel+1
Published
2023-05-06
·
Updated
2026-02-24
·
CVE-2023-53845
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the nilfs2 file system within the Linux kernel. If a disk image mounted by nilfs2 is corrupted, and an invalid virtual block address is obtained during block lookup for a metadata file, the
nilfs bmap lookup at level() function may return an error code that is misinterpreted by nilfs mdt get block(). This can lead to an infinite loop where metadata blocks are repeatedly read and created. Specifically, if this occurs with the inode metadata file (ifile), a semaphore (i rwsem) can remain held, resulting in task hangs within lock mount. The issue is addressed by treating virtual block address translation failures as metadata corruption instead of returning the error code.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Nilfs2