CVE-2023-53163

fs/ntfs3: don't hold ni_lock when calling truncate_setsize()

published September 15, 2025

CVSS
—
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

fs/ntfs3: don't hold ni_lock when calling truncate_setsize()

syzbot is reporting hung task at do_user_addr_fault() [1], for there is

a silent deadlock between PG_locked bit and ni_lock lock.

Since filemap_update_page() calls filemap_read_folio() after calling

folio_trylock() which will set PG_locked bit, ntfs_truncate() must not

call truncate_setsize() which will wait for PG_locked bit to be cleared

when holding ni_lock lock.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Published
2025-09-15T14:03Z
EPSS history
Timeline
  • 15 SEP 14:03Z
    fs/ntfs3: don't hold ni_lock when calling truncate_setsize()
    cvelistv5