Riskcovery

CVE-2023-53672

btrfs: output extra debug info if we failed to find an inline backref

State
Published
Severity
Not scored
Published
Oct 7, 2025
Updated
May 11, 2026
Reserved
Oct 7, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

btrfs: output extra debug info if we failed to find an inline backref

[BUG] Syzbot reported several warning triggered inside lookup_inline_extent_backref().

[CAUSE] As usual, the reproducer doesn't reliably trigger locally here, but at least we know the WARN_ON() is triggered when an inline backref can not be found, and it can only be triggered when @insert is true. (I.e. inserting a new inline backref, which means the backref should already exist)

[ENHANCEMENT] After the WARN_ON(), dump all the parameters and the extent tree leaf to help debug.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before 376b41524b71e494514720bd6114325b0a2ed19cAffected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before 400e08a16604b534fdd82c5a288fa150d04f5f79Affected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before 7afbfde45d665953b4d5a42a721e15bf0315d89bAffected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before b7c3cf2f6c42e6688b1c37215a0b1663f982f915Affected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before 6994f806c6d1ae8b59344d3700358547f3b3fe1dAffected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before 28062cd6eda04035d8f6ded2001292ac8b496149Affected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before e70ba449b04b40584bdabb383d10455397cbf177Affected
  • 492104c866cb1b62a11393adccb477f5cd2c7768 to before 7f72f50547b7af4ddf985b07fc56600a4deba281Affected
LinuxLinux
  • 3.9Affected
  • before 3.9Not affected
  • 4.14.326 through 4.14.*Not affected
  • 4.19.295 through 4.19.*Not affected
  • 5.4.257 through 5.4.*Not affected
  • 5.10.197 through 5.10.*Not affected
  • 5.15.133 through 5.15.*Not affected
  • 6.1.55 through 6.1.*Not affected
  • 6.5.5 through 6.5.*Not affected
  • 6.6 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.