CVE-2023-54177
kernel: quota: fix warning in dqgrab()
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · June 30, 2026
Description
A race condition flaw was found in the Linux kernel's disk quota subsystem. During concurrent filesystem remount operations involving quota suspend and resume, a warning can be triggered in dqgrab() when a dquot lacks the DQ_ACTIVE_B flag. This occurs due to a race between multiple processes manipulating quota state.
Statement
This issue manifests as a kernel warning rather than a crash or memory corruption. It requires specific timing with concurrent remount operations while quota is being manipulated. The warning indicates a harmless state that the code can handle safely.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 3.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition