CVE-2023-53620
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
07/10/2025
Last modified:
05/02/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
md: fix soft lockup in status_resync<br />
<br />
status_resync() will calculate &#39;curr_resync - recovery_active&#39; to show<br />
user a progress bar like following:<br />
<br />
[============>........] resync = 61.4%<br />
<br />
&#39;curr_resync&#39; and &#39;recovery_active&#39; is updated in md_do_sync(), and<br />
status_resync() can read them concurrently, hence it&#39;s possible that<br />
&#39;curr_resync - recovery_active&#39; can overflow to a huge number. In this<br />
case status_resync() will be stuck in the loop to print a large amount<br />
of &#39;=&#39;, which will end up soft lockup.<br />
<br />
Fix the problem by setting &#39;resync&#39; to MD_RESYNC_ACTIVE in this case,<br />
this way resync in progress will be reported to user.
Impact
Base Score 3.x
5.50
Severity 3.x
MEDIUM
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 2.6.12.1 (including) | 6.1.30 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.2 (including) | 6.3.4 (excluding) |
| cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



