CVE-2023-53845

An infinite loop vulnerability was found in the NILFS2 filesystem in the Linux kernel. When mounting a corrupted disk image where a virtual block address is invalid, nilfs_bmap_lookup_at_level() returns an error code that is misinterpreted by nilfs_mdt_get_block(). This causes an infinite loop attempting to read and create metadata blocks. When this affects the inode file (ifile), the i_rwsem semaphore remains held, causing task hangs during mount operations.

This is an infinite loop vulnerability in NILFS2 filesystem that can be triggered by mounting a corrupted filesystem image. The impact is limited to systems using NILFS2 and can be exploited by providing a maliciously crafted filesystem image.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.