Not yet scoredPublished Dec 30, 2025

CVE-2023-54311ext4: fix deadlock when converting an inline directory in nojournal mode

Updated under an hour ago (Oct 28, 2026, 6:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock by calling ext4_handle_dirty_dirblock() when it already has taken the directory lock. There is a similar self-deadlock in ext4_incvert_inline_data_nolock() for data files which we'll fix at the same time. A simple reproducer demonstrating the problem: mke2fs -Fq -t ext2 -O inline_data -b 4k /dev/vdc 64 mount -t ext4 -o dirsync /dev/vdc /vdc cd /vdc mkdir file0 cd file0 touch file0 touch file1 attr -s BurnSpaceInEA -V abcde . touch supercalifragilisticexpialidocious

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 3c47d54170b6a678875566b1b8d6dcf57904e49b before b4fa4768c9acff77245d672d855d2c88294850b1; from 3c47d54170b6a678875566b1b8d6dcf57904e49b before 5f8b55136ad787aed2c184f7cb3e93772ae637a3; from 3c47d54170b6a678875566b1b8d6dcf57904e49b before 640c8c365999c6f23447ac766437236ad88317c5; from 3c47d54170b6a678875566b1b8d6dcf57904e49b before 665cc3ba50330049524c1d275bc840a8f28dde73; 3c47d54170b6a678875566b1b8d6dcf57904e49b builds before 0b1c4357bb21d9770451a1bdb8d419ea10bada88; from 3c47d54170b6a678875566b1b8d6dcf57904e49b before 804de0c72cd473e186ca4e1f6287d45431b14e5a; from 3c47d54170b6a678875566b1b8d6dcf57904e49b before f4ce24f54d9cca4f09a395f3eecce20d6bec4663	CNA record

References

References

https://git.kernel.org/stable/c/b4fa4768c9acff77245d672d855d2c88294850b1
https://git.kernel.org/stable/c/5f8b55136ad787aed2c184f7cb3e93772ae637a3
https://git.kernel.org/stable/c/640c8c365999c6f23447ac766437236ad88317c5
https://git.kernel.org/stable/c/665cc3ba50330049524c1d275bc840a8f28dde73
https://git.kernel.org/stable/c/0b1c4357bb21d9770451a1bdb8d419ea10bada88
https://git.kernel.org/stable/c/804de0c72cd473e186ca4e1f6287d45431b14e5a
https://git.kernel.org/stable/c/f4ce24f54d9cca4f09a395f3eecce20d6bec4663

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.