PT-2025-52980

CVE-2023-54023

·

Published

2025-12-24

·

Updated

2026-10-19

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to a race condition between the btrfs balance operation and cancel/pause requests. A reproducer involving running a balance and a cancel or pause operation in parallel triggers an assertion failure within the kernel. Specifically, the issue arises from incorrect error handling during balance completion, potentially leading to improper cleanup and subsequent assertion failures when attempting to restart the balance operation. The problem occurs because the fs info structure does not correctly manage the balance ctl in all scenarios, particularly when a balance operation completes with a return value of 0 while a pause or cancel request is pending. This can result in the assertion fs info->exclusive operation == BTRFS EXCLOP BALANCE PAUSED failing in the btrfs exclop balance function, located in fs/btrfs/ioctl.c.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CLSA-2026-1791132991
SUSE-SU-2026:0278-1
SUSE-SU-2026:0281-1
SUSE-SU-2026:0293-1
SUSE-SU-2026:0315-1
SUSE-SU-2026:20477-1
SUSE-SU-2026:20498-1
SUSE-SU-2026:20845-1
SUSE-SU-2026:20876-1
Found an issue in the description? Have something to add? Feel free to write us 👾