{"id":"DEBIAN-CVE-2023-53835","details":"In the Linux kernel, the following vulnerability has been resolved:  ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled  When a file system currently mounted read/only is remounted read/write, if we clear the SB_RDONLY flag too early, before the quota is initialized, and there is another process/thread constantly attempting to create a directory, it's possible to trigger the  \tWARN_ON_ONCE(dquot_initialize_needed(inode));  in ext4_xattr_block_set(), with the following stack trace:     WARNING: CPU: 0 PID: 5338 at fs/ext4/xattr.c:2141 ext4_xattr_block_set+0x2ef2/0x3680    RIP: 0010:ext4_xattr_block_set+0x2ef2/0x3680 fs/ext4/xattr.c:2141    Call Trace:     ext4_xattr_set_handle+0xcd4/0x15c0 fs/ext4/xattr.c:2458     ext4_initxattrs+0xa3/0x110 fs/ext4/xattr_security.c:44     security_inode_init_security+0x2df/0x3f0 security/security.c:1147     __ext4_new_inode+0x347e/0x43d0 fs/ext4/ialloc.c:1324     ext4_mkdir+0x425/0xce0 fs/ext4/namei.c:2992     vfs_mkdir+0x29d/0x450 fs/namei.c:4038     do_mkdirat+0x264/0x520 fs/namei.c:4061     __do_sys_mkdirat fs/namei.c:4076 [inline]     __se_sys_mkdirat fs/namei.c:4074 [inline]     __x64_sys_mkdirat+0x89/0xa0 fs/namei.c:4074","modified":"2025-12-09T10:41:56.549839Z","published":"0001-01-01T00:00:00Z","withdrawn":"2025-12-09T10:41:56.549839Z","upstream":["CVE-2023-53835"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53835"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:11","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.10.191-1"}]}],"versions":["5.10.103-1","5.10.103-1~bpo10+1","5.10.106-1","5.10.113-1","5.10.120-1","5.10.120-1~bpo10+1","5.10.127-1","5.10.127-2","5.10.127-2~bpo10+1","5.10.136-1","5.10.140-1","5.10.148-1","5.10.149-1","5.10.149-2","5.10.158-1","5.10.158-2","5.10.162-1","5.10.178-1","5.10.178-2","5.10.178-3","5.10.179-1","5.10.179-2","5.10.179-3","5.10.179-4","5.10.179-5","5.10.46-4","5.10.46-5","5.10.70-1","5.10.70-1~bpo10+1","5.10.84-1","5.10.92-1","5.10.92-1~bpo10+1","5.10.92-2"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53835.json"}},{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.37-1"}]}],"versions":["6.1.27-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53835.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53835.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.4-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53835.json"}}],"schema_version":"1.7.3"}