CVE-2023-54311 - Vulnerability Details

- ext4: fix deadlock when converting an inline directory in nojournal mode

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix deadlock when converting an inline directory in nojournal mode

In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock
by calling ext4_handle_dirty_dirblock() when it already has taken the
directory lock. There is a similar self-deadlock in
ext4_incvert_inline_data_nolock() for data files which we'll fix at
the same time.

A simple reproducer demonstrating the problem:

mke2fs -Fq -t ext2 -O inline_data -b 4k /dev/vdc 64
mount -t ext4 -o dirsync /dev/vdc /vdc
cd /vdc
mkdir file0
cd file0
touch file0
touch file1
attr -s BurnSpaceInEA -V abcde .
touch supercalifragilisticexpialidocious

Published: 2025-12-30

Score: 5.5 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< b4fa4768c9acff77245d672d855d2c88294850b1
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< 5f8b55136ad787aed2c184f7cb3e93772ae637a3
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< 640c8c365999c6f23447ac766437236ad88317c5
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< 665cc3ba50330049524c1d275bc840a8f28dde73
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< 0b1c4357bb21d9770451a1bdb8d419ea10bada88
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< 804de0c72cd473e186ca4e1f6287d45431b14e5a
`3c47d54170b6a678875566b1b8d6dcf57904e49b`	affected	< f4ce24f54d9cca4f09a395f3eecce20d6bec4663

Linux

affected

Version	Status	Constraints
`3.8`	affected	—
`0`	unaffected	< 3.8
`5.4.243`	unaffected	≤ 5.4.*
`5.10.180`	unaffected	≤ 5.10.*
`5.15.112`	unaffected	≤ 5.15.*
`6.1.29`	unaffected	≤ 6.1.*
`6.2.16`	unaffected	≤ 6.2.*
`6.3.3`	unaffected	≤ 6.3.*
`6.4`	unaffected	≤ *

No data.

No data available yet.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00047.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0b1c4357bb21d9770451a1bdb8d419ea10bada88
https://git.kernel.org/stable/c/5f8b55136ad787aed2c184f7cb3e93772ae637a3
https://git.kernel.org/stable/c/640c8c365999c6f23447ac766437236ad88317c5
https://git.kernel.org/stable/c/665cc3ba50330049524c1d275bc840a8f28dde73
https://git.kernel.org/stable/c/804de0c72cd473e186ca4e1f6287d45431b14e5a
https://git.kernel.org/stable/c/b4fa4768c9acff77245d672d855d2c88294850b1
https://git.kernel.org/stable/c/f4ce24f54d9cca4f09a395f3eecce20d6bec4663
https://lore.kernel.org/linux-cve-announce/2025123036-CVE-2023-54311-46a2@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-54311
https://www.cve.org/CVERecord?id=CVE-2023-54311

History

Wed, 31 Dec 2025 12:15:00 +0000

Type	Values Removed	Values Added
References		https://lore.kernel.org/linux-cve-announce/2025123036-CVE-2023-54311-46a2@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2023-54311 https://www.cve.org/CVERecord?id=CVE-2023-54311
Metrics	threat_severity `None`	cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}` threat_severity `Low`

Tue, 30 Dec 2025 12:45:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock by calling ext4_handle_dirty_dirblock() when it already has taken the directory lock. There is a similar self-deadlock in ext4_incvert_inline_data_nolock() for data files which we'll fix at the same time. A simple reproducer demonstrating the problem: mke2fs -Fq -t ext2 -O inline_data -b 4k /dev/vdc 64 mount -t ext4 -o dirsync /dev/vdc /vdc cd /vdc mkdir file0 cd file0 touch file0 touch file1 attr -s BurnSpaceInEA -V abcde . touch supercalifragilisticexpialidocious
Title		ext4: fix deadlock when converting an inline directory in nojournal mode
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0b1c4357bb21d9770451a1bdb8d419ea10bada88 https://git.kernel.org/stable/c/5f8b55136ad787aed2c184f7cb3e93772ae637a3 https://git.kernel.org/stable/c/640c8c365999c6f23447ac766437236ad88317c5 https://git.kernel.org/stable/c/665cc3ba50330049524c1d275bc840a8f28dde73 https://git.kernel.org/stable/c/804de0c72cd473e186ca4e1f6287d45431b14e5a https://git.kernel.org/stable/c/b4fa4768c9acff77245d672d855d2c88294850b1 https://git.kernel.org/stable/c/f4ce24f54d9cca4f09a395f3eecce20d6bec4663

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-12-30T12:23:43.174Z

Updated: 2026-05-11T19:59:30.869Z

Reserved: 2025-12-30T12:06:44.530Z

Link: CVE-2023-54311

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2025-12-30T13:16:20.317

Modified: 2026-04-15T00:35:42.020

Link: CVE-2023-54311

Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54311 - Bugzilla

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object