Back to CVE records
Not yet scoredPublished Dec 24, 2025

CVE-2023-54099fs: Protect reconfiguration of sb read-write from racing writes

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: fs: Protect reconfiguration of sb read-write from racing writes The reconfigure / remount code takes a lot of effort to protect filesystem's reconfiguration code from racing writes on remounting read-only. However during remounting read-only filesystem to read-write mode userspace writes can start immediately once we clear SB_RDONLY flag. This is inconvenient for example for ext4 because we need to do some writes to the filesystem (such as preparation of quota files) before we can take userspace writes so we are clearing SB_RDONLY flag before we are fully ready to accept userpace writes and syzbot has found a way to exploit this [1]. Also as far as I'm reading the code the filesystem remount code was protected from racing writes in the legacy mount path by the mount's MNT_READONLY flag so this is relatively new problem. It is actually fairly easy to protect remount read-write from racing writes using sb->s_readonly_remount flag so let's just do that instead of having to workaround these races in the filesystem code. [1] https://lore.kernel.org/all/00000000000006a0df05f6667499@google.com/T/

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Deferred
Record last updated
May 11, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from 8d0347f6c3a9d4953ddd636a31c6584da082e084 before 0336b42456e485fda1006b5b411e7372e20fbf03; 8d0347f6c3a9d4953ddd636a31c6584da082e084 builds before 7e4e87ec56aa6d008c64eab31b340a7c452b26cc; 8d0347f6c3a9d4953ddd636a31c6584da082e084 builds before 0ccfe21949bc9f706a86ee7351b74375c0745757; from 8d0347f6c3a9d4953ddd636a31c6584da082e084 before 295ef44a2abaf97d7a594b1d4c60d4be3738191f; 8d0347f6c3a9d4953ddd636a31c6584da082e084 builds before 4abda85197ba5d695e6040d580b4b409ce0d3733; from 8d0347f6c3a9d4953ddd636a31c6584da082e084 before c541dce86c537714b6761a79a969c1623dfa222b
CNA record

References

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.