CVE-2023-53823

Multiple race condition vulnerabilities were found in the block layer's request quality of service (rq_qos) subsystem in the Linux kernel. The rq_qos APIs lacked proper synchronization, leading to: concurrent writes to q->rq_qos causing data corruption, NULL pointer dereferences when rq_qos_exit() races with cgroup policy activation, and memory leaks when disk deletion races with rq_qos additions. These issues can cause system instability or crashes.

These are race condition vulnerabilities in the block layer's QoS subsystem that can be triggered when using I/O cost or latency controllers through cgroups while disks are being removed. The impact requires specific timing conditions and cgroup usage.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.