CVE-2023-53838 f2fs: synchronize atomic write aborts
A race condition in Linux kernel f2fs atomic write aborts can lead to system instability or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-53838?
CVE-2023-53838 is a high-severity vulnerability in Linux, published on 9 Dec 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: synchronize atomic write aborts
To fix a race condition between atomic write aborts, I use the inode lock and make COW inode to be re-usable thoroughout the whole atomic file inode lifetime.
Which versions are affected by CVE-2023-53838?
How do I fix CVE-2023-53838?
Apply the vendor's patch.
Is CVE-2023-53838 being exploited?
There is no known exploitation of CVE-2023-53838 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2023-53838, DEBIAN-CVE-2023-53838, GHSA-qq3x-fvx9-x7fj, UBUNTU-CVE-2023-53838.