CVE Database›Document archive›CVE-2023-53829

CVE-2023-53829

kernel: f2fs: flush inode if atomic file is aborted

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · December 9, 2025

Updated · August 5, 2026

Description

A kernel panic vulnerability was found in the F2FS filesystem in the Linux kernel. When an atomic file operation is aborted, the inode is not properly flushed, leaving it in a dirty state during eviction. This triggers f2fs_bug_on() in f2fs_evict_inode() when the FI_DIRTY_INODE flag is still set, causing a kernel panic. This can occur during filesystem unmount or process exit.

Statement

This is a kernel panic vulnerability in the F2FS filesystem that can be triggered when atomic write operations are aborted. The impact is limited to systems using F2FS filesystem with atomic file features.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-821 · Incorrect Synchronization