CVE-2023-53672
MEDIUMLinux Kernel - Denial of Service via Btrfs Inline Backref Handling
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: btrfs: output extra debug info if we failed to find an inline backref [BUG] Syzbot reported several warning triggered inside lookup_inline_extent_backref(). [CAUSE] As usual, the reproducer doesn't reliably trigger locally here, but at least we know the WARN_ON() is triggered when an inline backref can not be found, and it can only be triggered when @insert is true. (I.e. inserting a new inline backref, which means the backref should already exist) [ENHANCEMENT] After the WARN_ON(), dump all the parameters and the extent tree leaf to help debug.
References (8)
Core 8
Core References
Scores
CVSS v3
5.5
EPSS
0.0014
EPSS Percentile
3.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (27)
linux/Kernel
3.9.0 - 4.14.326linux
linux/Kernel
4.15.0 - 4.19.295linux
linux/Kernel
4.20.0 - 5.4.257linux
linux/Kernel
5.11.0 - 5.15.133linux
linux/Kernel
5.16.0 - 6.1.55linux
linux/Kernel
5.5.0 - 5.10.197linux
linux/Kernel
6.2.0 - 6.5.5linux
Linux/Linux
< 3.9
Linux/Linux
3.9
Linux/Linux
4.14.326 - 4.14.*
... and 17 more
Published
Oct 07, 2025
Tracked Since
Feb 18, 2026