CVE-2023-53838
kernel: f2fs: synchronize atomic write aborts
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 9, 2025
Updated · August 5, 2026
Description
A race condition was found in the F2FS filesystem's atomic write abort handling in the Linux kernel. Concurrent atomic write abort operations lack proper synchronization, which can lead to inconsistent COW (copy-on-write) inode state and potential use-after-free or data corruption scenarios.
Statement
F2FS is primarily used on flash storage devices in mobile and embedded systems. Enterprise server deployments typically use ext4 or XFS, limiting exposure to this vulnerability.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-820 · Missing Synchronization