CVE-2023-54182
kernel: Kernel: f2fs denial of service from incorrect read-only check
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · December 30, 2025
Updated · August 14, 2026
Description
A flaw was found in the f2fs filesystem within the Linux kernel. A local user could trigger a kernel panic by mounting a multi-device f2fs image where one device is read-only, then attempting to remount it with read-write options and performing a write operation. This incorrect handling of the read-only condition leads to a system crash, resulting in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.3CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition