CVE-2023-53620

md: fix soft lockup in status_resync

published October 7, 2025

CVSS
—
EPSS
0%
Percentile
4.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

md: fix soft lockup in status_resync

status_resync() will calculate 'curr_resync - recovery_active' to show

user a progress bar like following:

[============>........] resync = 61.4%

'curr_resync' and 'recovery_active' is updated in md_do_sync(), and

status_resync() can read them concurrently, hence it's possible that

'curr_resync - recovery_active' can overflow to a huge number. In this

case status_resync() will be stuck in the loop to print a large amount

of '=', which will end up soft lockup.

Fix the problem by setting 'resync' to MD_RESYNC_ACTIVE in this case,

this way resync in progress will be reported to user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00152 · 4.0th percentile
Published
2025-10-07T15:19Z
EPSS history
Timeline
  • 07 OCT 15:19Z
    md: fix soft lockup in status_resync
    cvelistv5