CVE-2023-53429

CVE-2023-53429

High · published September 18, 2025

CVSS v3.1
7.8
EPSS
0%
Percentile
4.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

btrfs: don't check PageError in __extent_writepage

__extent_writepage currenly sets PageError whenever any error happens,

and the also checks for PageError to decide if to call error handling.

This leads to very unclear responsibility for cleaning up on errors.

In the VM and generic writeback helpers the basic idea is that once

I/O is fired off all error handling responsibility is delegated to the

end I/O handler. But if that end I/O handler sets the PageError bit,

and the submitter checks it, the bit could in some cases leak into the

submission context for fast enough I/O.

Fix this by simply not checking PageError and just using the local

ret variable to check for submission errors. This also fundamentally

solves the long problem documented in a comment in __extent_writepage

by never leaking the error bit into the submission context.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00154 · 4.2th percentile
Published
2025-09-18T20:15Z
Affected products (1)
ProductVersionsFixed in
linux/linux_kernel< 6.4.76.4.7
References (3)
EPSS history
Timeline
  • 18 SEP 16:04Z
    btrfs: don't check PageError in __extent_writepage
    cvelistv5