CVE-2023-53829
kernel: f2fs: flush inode if atomic file is aborted
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 9, 2025
Updated · August 5, 2026
Description
A kernel panic vulnerability was found in the F2FS filesystem in the Linux kernel. When an atomic file operation is aborted, the inode is not properly flushed, leaving it in a dirty state during eviction. This triggers f2fs_bug_on() in f2fs_evict_inode() when the FI_DIRTY_INODE flag is still set, causing a kernel panic. This can occur during filesystem unmount or process exit.
Statement
This is a kernel panic vulnerability in the F2FS filesystem that can be triggered when atomic write operations are aborted. The impact is limited to systems using F2FS filesystem with atomic file features.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-821 · Incorrect Synchronization