CVE-2023-53183

Source
https://cve.org/CVERecord?id=CVE-2023-53183
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53183.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-53183
Downstream
Related
Published
2025-09-15T14:04:35.399Z
Modified
2026-03-12T03:28:03.933249Z
Summary
btrfs: exit gracefully if reloc roots don't match
Details

In the Linux kernel, the following vulnerability has been resolved:

btrfs: exit gracefully if reloc roots don't match

[BUG] Syzbot reported a crash that an ASSERT() got triggered inside preparetomerge().

[CAUSE] The root cause of the triggered ASSERT() is we can have a race between quota tree creation and relocation.

This leads us to create a duplicated quota tree in the btrfsreadfsroot() path, and since it's treated as fs tree, it would have ROOTSHAREABLE flag, causing us to create a reloc tree for it.

The bug itself is fixed by a dedicated patch for it, but this already taught us the ASSERT() is not something straightforward for developers.

[ENHANCEMENT] Instead of using an ASSERT(), let's handle it gracefully and output extra info about the mismatch reloc roots to help debug.

Also with the above ASSERT() removed, we can trigger ASSERT(0)s inside mergerelocroots() later. Also replace those ASSERT(0)s with WARN_ON()s.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53183.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
69dd147de419b04d1d8d2ca67ef424cddd5b8fd5
Fixed
9d04716e36654275aea00fb93fc9b30b850925e7
Fixed
a96b6519ac71583835cb46d74bc450de5a13877f
Fixed
05d7ce504545f7874529701664c90814ca645c5d

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53183.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.127
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.46
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.4.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53183.json"