CVE Database›Document archive›CVE-2023-53183

CVE-2023-53183

kernel: Linux kernel (btrfs): Denial of Service due to a race condition in quota tree handling

Loading…

Severity

Moderate

Red Hat Product Security

4.7

CVSS 3.1

Review impact separately from score.

Published · September 15, 2025

Updated · June 30, 2026

Description

A flaw was found in the Linux kernel's btrfs filesystem. A local user could exploit a race condition that occurs during the creation and relocation of quota trees. This race condition can lead to a system crash, resulting in a Denial of Service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the btrfs kernel module from loading on affected Red Hat Enterprise Linux 6 and 7 systems. This can be achieved by blacklisting the btrfs module via a modprobe configuration file. This action will prevent the use of the btrfs filesystem and may impact system functionality if btrfs is in use. A system reboot is required for the changes to take effect.

Example for blacklisting the module: Create a file in /etc/modprobe.d/ (e.g., blacklist-btrfs.conf) with content similar to:

blacklist btrfs
install btrfs /bin/true

After modifying the modprobe configuration, the initramfs should be regenerated, and the system must be rebooted for the changes to take effect.

CVSS / CWE

CVSS 3.1 · 4.7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition