CVE-2023-53183
kernel: Linux kernel (btrfs): Denial of Service due to a race condition in quota tree handling
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 15, 2025
Updated · June 30, 2026
Description
A flaw was found in the Linux kernel's btrfs filesystem. A local user could exploit a race condition that occurs during the creation and relocation of quota trees. This race condition can lead to a system crash, resulting in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the btrfs kernel module from loading on affected Red Hat Enterprise Linux 6 and 7 systems. This can be achieved by blacklisting the btrfs module via a modprobe configuration file. This action will prevent the use of the btrfs filesystem and may impact system functionality if btrfs is in use. A system reboot is required for the changes to take effect.
Example for blacklisting the module:
Create a file in /etc/modprobe.d/ (e.g., blacklist-btrfs.conf) with content similar to:
blacklist btrfs
install btrfs /bin/true
After modifying the modprobe configuration, the initramfs should be regenerated, and the system must be rebooted for the changes to take effect.
CVSS / CWE
CVSS 3.1 · 4.7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition