CVE Database›Document archive›CVE-2023-53622

CVE-2023-53622

kernel: gfs2: Fix possible data races in gfs2_show_options()

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · October 7, 2025

Updated · June 30, 2026

Description

A race condition was found in the Linux kernel's GFS2 filesystem in the mount options display logic. A local user can trigger this issue by concurrently reading filesystem mount options while another process modifies filesystem tuning parameters, causing gfs2_show_options to read fields like gt_logd_secs without holding the gt_spin lock. This results in data races that can produce inconsistent or corrupted output, potentially leading to denial of service through system instability.

Statement

The gfs2_show_options function displays filesystem mount options by reading various tuning parameters from the gfs2_tune structure. While concurrent modifications of these parameters via gfs2_reconfigure acquire the gt_spin lock for protection, the read operations in gfs2_show_options do not hold this lock. This creates classic data races where reads and writes to the same memory locations occur simultaneously without synchronization. While the immediate effect is inconsistent mount option output, the unsynchronized memory access violates kernel memory ordering assumptions and could potentially trigger more serious issues depending on the underlying architecture and compiler optimizations.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-820 · Missing Synchronization