PT-2025-49739 · Linux+3 · Linux Kernel+3

CVE-2023-53848

·

Published

2023-07-08

·

Updated

2026-07-01

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A deadlock situation exists within the r5l exit log() function in the md/raid5-cache component of the Linux kernel. This issue stems from a commit (b13015af94cf) intended to clear the conf->log pointer, which inadvertently created a deadlock condition. Specifically, the wait event() function within r5c disable writeback async() could indefinitely wait because conf->log was not NULL, and mddev trylock() would fail. The fix involves setting config->log to NULL before the wake up() call, restoring the previous behavior and allowing the wait event() to proceed. The fix also moves forward md unregister thread() to address a null-pointer dereference.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-10286
CVE-2023-53848
RHSA-2024:2394
RHSA-2024:3138
SUSE-SU-2026:0263-1
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:0317-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1

Affected Products

Centos
Linux Kernel
Red Hat
Red Os