CVE-2023-53622
kernel: gfs2: Fix possible data races in gfs2_show_options()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 7, 2025
Updated · June 30, 2026
Description
A race condition was found in the Linux kernel's GFS2 filesystem in the mount options display logic. A local user can trigger this issue by concurrently reading filesystem mount options while another process modifies filesystem tuning parameters, causing gfs2_show_options to read fields like gt_logd_secs without holding the gt_spin lock. This results in data races that can produce inconsistent or corrupted output, potentially leading to denial of service through system instability.
Statement
The gfs2_show_options function displays filesystem mount options by reading various tuning parameters from the gfs2_tune structure. While concurrent modifications of these parameters via gfs2_reconfigure acquire the gt_spin lock for protection, the read operations in gfs2_show_options do not hold this lock. This creates classic data races where reads and writes to the same memory locations occur simultaneously without synchronization. While the immediate effect is inconsistent mount option output, the unsynchronized memory access violates kernel memory ordering assumptions and could potentially trigger more serious issues depending on the underlying architecture and compiler optimizations.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-820 · Missing Synchronization