In the Linux kernel, the following vulnerability has been resolved:

ext4: fix deadlock when converting an inline directory in nojournal mode

In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock
by calling ext4_handle_dirty_dirblock() when it already has taken the
directory lock. There is a similar self-deadlock in
ext4_incvert_inline_data_nolock() for data files which we'll fix at
the same time.

A simple reproducer demonstrating the problem:

mke2fs -Fq -t ext2 -O inline_data -b 4k /dev/vdc 64
mount -t ext4 -o dirsync /dev/vdc /vdc
cd /vdc
mkdir file0
cd file0
touch file0
touch file1
attr -s BurnSpaceInEA -V abcde .
touch supercalifragilisticexpialidocious

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00036.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< b4fa4768c9acff77245d672d855d2c88294850b1
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< 5f8b55136ad787aed2c184f7cb3e93772ae637a3
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< 640c8c365999c6f23447ac766437236ad88317c5
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< 665cc3ba50330049524c1d275bc840a8f28dde73
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< 0b1c4357bb21d9770451a1bdb8d419ea10bada88
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< 804de0c72cd473e186ca4e1f6287d45431b14e5a
3c47d54170b6a678875566b1b8d6dcf57904e49b affected
< f4ce24f54d9cca4f09a395f3eecce20d6bec4663
Linux Linux affected
Version Status Constraints
3.8 affected
—
0 unaffected
< 3.8
5.4.243 unaffected
≤ 5.4.*
5.10.180 unaffected
≤ 5.10.*
5.15.112 unaffected
≤ 5.15.*
6.1.29 unaffected
≤ 6.1.*
6.2.16 unaffected
≤ 6.2.*
6.3.3 unaffected
≤ 6.3.*
6.4 unaffected
≤ *

No data.

No data.

No data.

Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0b1c4357bb21d9770451a1bdb8d419ea10bada88 cve-icon cve-icon
https://git.kernel.org/stable/c/5f8b55136ad787aed2c184f7cb3e93772ae637a3 cve-icon cve-icon
https://git.kernel.org/stable/c/640c8c365999c6f23447ac766437236ad88317c5 cve-icon cve-icon
https://git.kernel.org/stable/c/665cc3ba50330049524c1d275bc840a8f28dde73 cve-icon cve-icon
https://git.kernel.org/stable/c/804de0c72cd473e186ca4e1f6287d45431b14e5a cve-icon cve-icon
https://git.kernel.org/stable/c/b4fa4768c9acff77245d672d855d2c88294850b1 cve-icon cve-icon
https://git.kernel.org/stable/c/f4ce24f54d9cca4f09a395f3eecce20d6bec4663 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025123036-CVE-2023-54311-46a2@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2023-54311 cve-icon
https://www.cve.org/CVERecord?id=CVE-2023-54311 cve-icon
History

Wed, 31 Dec 2025 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low

Tue, 30 Dec 2025 12:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ext4: fix deadlock when converting an inline directory in nojournal mode In no journal mode, ext4_finish_convert_inline_dir() can self-deadlock by calling ext4_handle_dirty_dirblock() when it already has taken the directory lock. There is a similar self-deadlock in ext4_incvert_inline_data_nolock() for data files which we'll fix at the same time. A simple reproducer demonstrating the problem: mke2fs -Fq -t ext2 -O inline_data -b 4k /dev/vdc 64 mount -t ext4 -o dirsync /dev/vdc /vdc cd /vdc mkdir file0 cd file0 touch file0 touch file1 attr -s BurnSpaceInEA -V abcde . touch supercalifragilisticexpialidocious
Title ext4: fix deadlock when converting an inline directory in nojournal mode
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-05T11:37:22.439Z

Reserved: 2025-12-30T12:06:44.530Z

Link: CVE-2023-54311

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-12-30T13:16:20.317

Modified: 2025-12-31T20:42:43.210

Link: CVE-2023-54311

cve-icon Redhat

Severity : Low

Publid Date: 2025-12-30T00:00:00Z

Links: CVE-2023-54311 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.