5.5

CVE-2023-53618: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2023-53618DEBIAN-CVE-2023-53618
Published 07-10-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2023-53618 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 8.9% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 10 · Related 10
SUSE-SU-2025:21040-1SUSE-SU-2025:21052-1SUSE-SU-2025:21056-1SUSE-SU-2025:21064-1SUSE-SU-2025:4057-1SUSE-SU-2025:4128-1

Timeline

  1. 07-10-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject invalid reloc tree root keys with stack dump [BUG] Syzbot reported a crash that an ASSERT() got triggered inside prepare_to_merge(). That ASSERT() makes sure the reloc tree is properly pointed back by its subvolume tree. [CAUSE] After more debugging output, it turns out we had an invalid reloc tree: BTRFS error (device loop1): reloc tree mismatch, root 8 has no reloc root, expect reloc root key (-8, 132, 8) gen 17 Note the above root key is (TREE_RELOC_OBJECTID, ROOT_ITEM, QUOTA_TREE_OBJECTID), meaning it's a reloc tree for quota tree. But reloc trees can only exist for subvolumes, as for non-subvolume trees, we just COW the involved tree block, no need to create a reloc tree since those tree blocks won't be shared with other trees. Only subvolumes tree can share tree blocks with other trees (thus they have BTRFS_ROOT_SHAREABLE flag). Thus this new debug output proves my previous assumption that corrupted on-disk data can trigger that ASSERT(). [FIX] Besides the dedicated fix and the graceful exit, also let tree-checker to check such root keys, to make sure reloc trees can only exist for subvolumes.

CVSS metrics

3 scores · 3 sources · 1 version

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu124 products
  • linuxAll versions (No fix recorded) | < 5.15.0-91.101
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1051.56
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 259ee7754b6793af8bdd77f9ca818bc41cfe9541, < 314135b7bae9618a317874ae195272682cf2d5d4 | ≥ 259ee7754b6793af8bdd77f9ca818bc41cfe9541, < 3ae93b316ca4b8b3c33798ef1d210355f2fb9318 | ≥ 259ee7754b6793af8bdd77f9ca818bc41cfe9541, < 84256e00eeca73c529fc6196e478cc89b8098157 | ≥ 259ee7754b6793af8bdd77f9ca818bc41cfe9541, < 6ebcd021c92b8e4b904552e4d87283032100796d | 3d95c52d789ca99e344061d7f6dadb2519adbcf5 | fba904d68c8bbfcc89c2210cfcb2351be90bc3e5 | ≥ 5.2.19, < 5.3 | ≥ 5.3.4, < 5.4 | 5.4
  • linux_kernel≥ 5.2.19, < 5.3 | ≥ 5.3.4, < 5.15.127 | ≥ 5.16, < 6.1.46 | ≥ 6.2, < 6.4.11 | 6.5:rc1 | 6.5:rc2 | 6.5:rc3 | 6.5:rc4 | 6.5:rc5
Debian1 product
  • linux< 6.1.52-1 | < 6.4.11-1

3 vendors · 127 products

References

8 links