CVE-2023-53620 Details
Description
In the Linux kernel, the following vulnerability has been resolved: md: fix soft lockup in status_resync status_resync() will calculate 'curr_resync - recovery_active' to show user a progress bar like following: [============>........] resync = 61.4% 'curr_resync' and 'recovery_active' is updated in md_do_sync(), and status_resync() can read them concurrently, hence it's possible that 'curr_resync - recovery_active' can overflow to a huge number. In this case status_resync() will be stuck in the loop to print a large amount of '=', which will end up soft lockup. Fix the problem by setting 'resync' to MD_RESYNC_ACTIVE in this case, this way resync in progress will be reported to user.
A vulnerability in the Linux kernel's md (multiple device) subsystem can lead to a soft lockup. The issue arises in the status_resync function, which calculates the difference between 'curr_resync' and 'recovery_active' to display a progress bar. This calculation can overflow, causing the function to enter a loop that prints excessive output, ultimately leading to a soft lockup. The vulnerability affects the Linux kernel stable tree.
The vulnerability has been addressed in the Linux kernel. Users can upgrade to the latest version to mitigate this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/23309704e90859af2662bedc44101e6d1d2ece7e | kernel.org | Patch |
| https://git.kernel.org/stable/c/6efddf1e32e2a264694766ca485a4f5e04ee82a7 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b4acb6c3ede88d6b7d33742a09e63cfce5e7fb69 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-667 | Improper Locking | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 2.6.12.1, < 6.1.30 >= 6.2, < 6.3.4 2.6.12 - 2.6.12 rc2 2.6.12 rc3 2.6.12 rc4 2.6.12 rc5 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| Feb 5, 2026 | Initial Analysis | [email protected] |
| Oct 7, 2025 | New CVE Received | kernel.org |