CVE-2023-53848

In the Linux kernel, the following vulnerability has been resolved: md/raid5-cache: fix a deadlock in r5l_exit_log() Commit b13015af94cf ("md/raid5-cache: Clear conf->log after finishing work") introduce a new problem: // caller hold reconfig_mutex r5l_exit_log flush_work(&log->disable_writeback_work) r5c_disable_writeback_async wait_event /* * conf->log is not NULL, and mddev_trylock() * will fail, wait_event() can never pass. */ conf->log = NULL Fix this problem by setting 'config->log' to NULL before wake_up() as it used to be, so that wait_event() from r5c_disable_writeback_async() can exist. In the meantime, move forward md_unregister_thread() so that null-ptr-deref this commit fixed can still be fixed.

CVSS

No CVSS.

References

Link	Resource
https://git.kernel.org/stable/c/71cf23271f015a57038bdc4669952096f9fe5500
https://git.kernel.org/stable/c/a705b11b358dee677aad80630e7608b2d5f56691
https://git.kernel.org/stable/c/ac9e103f282a7854f3274ef5ff0742fbbe8d7d6b
https://git.kernel.org/stable/c/c406984738215dc20ac2dc63e49d70f20797730e

Configurations

No configuration.

History

No history.

Information

Published : 2025-12-09 16:17

Updated : 2026-06-17 06:46

NVD link : CVE-2023-53848

Mitre link : CVE-2023-53848

CVE.ORG link : CVE-2023-53848

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2023-53848", "cveTags": [], "metrics": {}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "b13015af94cf405f73ff64ce0797269554020c37", "lessThan": "ac9e103f282a7854f3274ef5ff0742fbbe8d7d6b", "versionType": "git"}, {"status": "affected", "version": "b13015af94cf405f73ff64ce0797269554020c37", "lessThan": "71cf23271f015a57038bdc4669952096f9fe5500", "versionType": "git"}, {"status": "affected", "version": "b13015af94cf405f73ff64ce0797269554020c37", "lessThan": "c406984738215dc20ac2dc63e49d70f20797730e", "versionType": "git"}, {"status": "affected", "version": "b13015af94cf405f73ff64ce0797269554020c37", "lessThan": "a705b11b358dee677aad80630e7608b2d5f56691", "versionType": "git"}], "programFiles": ["drivers/md/raid5-cache.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.0"}, {"status": "unaffected", "version": "0", "lessThan": "6.0", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.53", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.4.16", "versionType": "semver", "lessThanOrEqual": "6.4.*"}, {"status": "unaffected", "version": "6.5.3", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["drivers/md/raid5-cache.c"], "defaultStatus": "affected"}]}], "published": "2025-12-09T16:17:25.290", "references": [{"url": "https://git.kernel.org/stable/c/71cf23271f015a57038bdc4669952096f9fe5500", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/a705b11b358dee677aad80630e7608b2d5f56691", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/ac9e103f282a7854f3274ef5ff0742fbbe8d7d6b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c406984738215dc20ac2dc63e49d70f20797730e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Deferred", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd/raid5-cache: fix a deadlock in r5l_exit_log()\n\nCommit b13015af94cf (\"md/raid5-cache: Clear conf->log after finishing\nwork\") introduce a new problem:\n\n// caller hold reconfig_mutex\nr5l_exit_log\n flush_work(&log->disable_writeback_work)\n\t\t\tr5c_disable_writeback_async\n\t\t\t wait_event\n\t\t\t /*\n\t\t\t * conf->log is not NULL, and mddev_trylock()\n\t\t\t * will fail, wait_event() can never pass.\n\t\t\t */\n conf->log = NULL\n\nFix this problem by setting 'config->log' to NULL before wake_up() as it\nused to be, so that wait_event() from r5c_disable_writeback_async() can\nexist. In the meantime, move forward md_unregister_thread() so that\nnull-ptr-deref this commit fixed can still be fixed."}], "lastModified": "2026-06-17T06:46:10.730", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}