PT-2025-54127 · Linux+1 · Linux Kernel+1

Published 2023-09-08 · Updated 2026-03-24 · CVE-2023-54281

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc7

Description The Linux kernel contained a flaw within the btrfs subsystem related to the ino lookup ioctl. Specifically, the issue arises when calling btrfs iget() to obtain an inode reference while holding a root's btree lock. If btrfs iget() needs to locate the inode from the root's btree, it may attempt to lock another or the same path within the same root btree, potentially leading to a deadlock. This deadlock can trigger a lock dependency splat, indicating a circular locking dependency.

Recommendations Update to a version newer than 6.5.0-rc7.

Exploit

Fix

Weakness Enumeration

CWE-833

Related Identifiers

BDU:2026-01196

CVE-2023-54281

SUSE-SU-2026:0278-1

SUSE-SU-2026:0281-1

SUSE-SU-2026:0293-1

SUSE-SU-2026:0315-1

SUSE-SU-2026:20477-1

SUSE-SU-2026:20498-1

SUSE-SU-2026:20845-1

SUSE-SU-2026:20876-1

Affected Products

Linux Kernel

Btrfs

References · 1465

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54281.json · Exploit
• https://osv.dev/vulnerability/CVE-2023-54281 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20845-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-54281 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0281-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-54281 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-54281 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20876-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0293-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-01196 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:20498-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20477-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-54281 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2026:0278-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0315-1 · Vendor Advisory