CVE-2023-53081

ocfs2: fix data corruption after failed write

State: Published
Severity: Not scored
Published: May 2, 2025
Updated: May 23, 2026
Reserved: May 2, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: fix data corruption after failed write

When buffered write fails to copy data into underlying page cache page, ocfs2_write_end_nolock() just zeroes out and dirties the page. This can leave dirty page beyond EOF and if page writeback tries to write this page before write succeeds and expands i_size, page gets into inconsistent state where page dirty bit is clear but buffer dirty bits stay set resulting in page data never getting written and so data copied to the page is lost. Fix the problem by invalidating page beyond EOF after failed write.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7ed80e77c908cbaa686529a49f8ae0060c5caee7 to before 1629f6f522b2d058019710466a84b240683bbee3Affected 7ce2b16bad2cbfa3fa7bbc42c4448914f639ca47 to before c26f3ff4c0be590c1250f945ac2e4fc5fcdc5f45Affected f8a6a2ed4b7d1c3c8631eeb6d00572bc853094a8 to before 4c24eb49ab44351424ac8fe8567f91ea48a06089Affected 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 91d7a4bd5656552d6259e2d0f8859f9e8cc5ef68Affected 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before a9e53869cb43c96d6d851c491fd4e26430ab6ba6Affected 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 47eb055ad3588fc96d34e9e1dd87b210ce62906bAffected 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 205759c6c18f54659b0b5976b14a52d1b3eb9f57Affected 6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 90410bcf873cf05f54a32183afff0161f44f9715Affected acef5107e2eacb08a16ad5db60320d65bd26a6c0Affected 36ed9e604215f58cec0381ca5fcc6da05f2d87caAffected 4.14.204 to before 4.14.312Affected 4.19.155 to before 4.19.280Affected 5.4.75 to before 5.4.240Affected 4.9.242 to before 4.10Affected 5.9.5 to before 5.10Affected
LinuxLinux	5.10Affected before 5.10Not affected 4.14.312 through 4.14.Not affected 4.19.280 through 4.19.Not affected 5.4.240 through 5.4.Not affected 5.10.177 through 5.10.Not affected 5.15.105 through 5.15.Not affected 6.1.21 through 6.1.Not affected 6.2.8 through 6.2.*Not affected 6.3 and laterNot affected

Product

Versions

LinuxLinux

7ed80e77c908cbaa686529a49f8ae0060c5caee7 to before 1629f6f522b2d058019710466a84b240683bbee3Affected
7ce2b16bad2cbfa3fa7bbc42c4448914f639ca47 to before c26f3ff4c0be590c1250f945ac2e4fc5fcdc5f45Affected
f8a6a2ed4b7d1c3c8631eeb6d00572bc853094a8 to before 4c24eb49ab44351424ac8fe8567f91ea48a06089Affected
6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 91d7a4bd5656552d6259e2d0f8859f9e8cc5ef68Affected
6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before a9e53869cb43c96d6d851c491fd4e26430ab6ba6Affected
6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 47eb055ad3588fc96d34e9e1dd87b210ce62906bAffected
6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 205759c6c18f54659b0b5976b14a52d1b3eb9f57Affected
6dbf7bb555981fb5faf7b691e8f6169fc2b2e63b to before 90410bcf873cf05f54a32183afff0161f44f9715Affected
acef5107e2eacb08a16ad5db60320d65bd26a6c0Affected
36ed9e604215f58cec0381ca5fcc6da05f2d87caAffected
4.14.204 to before 4.14.312Affected
4.19.155 to before 4.19.280Affected
5.4.75 to before 5.4.240Affected
4.9.242 to before 4.10Affected
5.9.5 to before 5.10Affected

LinuxLinux

5.10Affected
before 5.10Not affected
4.14.312 through 4.14.*Not affected
4.19.280 through 4.19.*Not affected
5.4.240 through 5.4.*Not affected
5.10.177 through 5.10.*Not affected
5.15.105 through 5.15.*Not affected
6.1.21 through 6.1.*Not affected
6.2.8 through 6.2.*Not affected
6.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.