{"id":"CVE-2023-53672","state":"PUBLISHED","title":"btrfs: output extra debug info if we failed to find an inline backref","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: output extra debug info if we failed to find an inline backref\n\n[BUG]\nSyzbot reported several warning triggered inside\nlookup_inline_extent_backref().\n\n[CAUSE]\nAs usual, the reproducer doesn't reliably trigger locally here, but at\nleast we know the WARN_ON() is triggered when an inline backref can not\nbe found, and it can only be triggered when @insert is true. (I.e.\ninserting a new inline backref, which means the backref should already\nexist)\n\n[ENHANCEMENT]\nAfter the WARN_ON(), dump all the parameters and the extent tree\nleaf to help debug.","publishedAt":"2025-10-07T15:21:28.975Z","updatedAt":"2026-05-11T19:49:40.994Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"376b41524b71e494514720bd6114325b0a2ed19c","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"400e08a16604b534fdd82c5a288fa150d04f5f79","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"7afbfde45d665953b4d5a42a721e15bf0315d89b","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"b7c3cf2f6c42e6688b1c37215a0b1663f982f915","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"6994f806c6d1ae8b59344d3700358547f3b3fe1d","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"28062cd6eda04035d8f6ded2001292ac8b496149","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"e70ba449b04b40584bdabb383d10455397cbf177","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"7f72f50547b7af4ddf985b07fc56600a4deba281","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/extent-tree.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.9","versionType":"semver"},{"version":"4.14.326","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.295","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.257","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.197","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.133","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.55","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.5.5","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/extent-tree.c"]}],"references":["https://git.kernel.org/stable/c/376b41524b71e494514720bd6114325b0a2ed19c","https://git.kernel.org/stable/c/400e08a16604b534fdd82c5a288fa150d04f5f79","https://git.kernel.org/stable/c/7afbfde45d665953b4d5a42a721e15bf0315d89b","https://git.kernel.org/stable/c/b7c3cf2f6c42e6688b1c37215a0b1663f982f915","https://git.kernel.org/stable/c/6994f806c6d1ae8b59344d3700358547f3b3fe1d","https://git.kernel.org/stable/c/28062cd6eda04035d8f6ded2001292ac8b496149","https://git.kernel.org/stable/c/e70ba449b04b40584bdabb383d10455397cbf177","https://git.kernel.org/stable/c/7f72f50547b7af4ddf985b07fc56600a4deba281"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/53xxx/CVE-2023-53672.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-53672","state":"PUBLISHED","datePublished":"2025-10-07T15:21:28.975Z","dateUpdated":"2026-05-11T19:49:40.994Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2025-10-07T15:16:59.663Z"},"containers":{"cna":{"title":"btrfs: output extra debug info if we failed to find an inline backref","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: output extra debug info if we failed to find an inline backref\n\n[BUG]\nSyzbot reported several warning triggered inside\nlookup_inline_extent_backref().\n\n[CAUSE]\nAs usual, the reproducer doesn't reliably trigger locally here, but at\nleast we know the WARN_ON() is triggered when an inline backref can not\nbe found, and it can only be triggered when @insert is true. (I.e.\ninserting a new inline backref, which means the backref should already\nexist)\n\n[ENHANCEMENT]\nAfter the WARN_ON(), dump all the parameters and the extent tree\nleaf to help debug."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"376b41524b71e494514720bd6114325b0a2ed19c","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"400e08a16604b534fdd82c5a288fa150d04f5f79","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"7afbfde45d665953b4d5a42a721e15bf0315d89b","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"b7c3cf2f6c42e6688b1c37215a0b1663f982f915","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"6994f806c6d1ae8b59344d3700358547f3b3fe1d","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"28062cd6eda04035d8f6ded2001292ac8b496149","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"e70ba449b04b40584bdabb383d10455397cbf177","versionType":"git"},{"version":"492104c866cb1b62a11393adccb477f5cd2c7768","status":"affected","lessThan":"7f72f50547b7af4ddf985b07fc56600a4deba281","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/extent-tree.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"3.9","status":"affected"},{"version":"0","status":"unaffected","lessThan":"3.9","versionType":"semver"},{"version":"4.14.326","status":"unaffected","lessThanOrEqual":"4.14.*","versionType":"semver"},{"version":"4.19.295","status":"unaffected","lessThanOrEqual":"4.19.*","versionType":"semver"},{"version":"5.4.257","status":"unaffected","lessThanOrEqual":"5.4.*","versionType":"semver"},{"version":"5.10.197","status":"unaffected","lessThanOrEqual":"5.10.*","versionType":"semver"},{"version":"5.15.133","status":"unaffected","lessThanOrEqual":"5.15.*","versionType":"semver"},{"version":"6.1.55","status":"unaffected","lessThanOrEqual":"6.1.*","versionType":"semver"},{"version":"6.5.5","status":"unaffected","lessThanOrEqual":"6.5.*","versionType":"semver"},{"version":"6.6","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/btrfs/extent-tree.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/376b41524b71e494514720bd6114325b0a2ed19c"},{"url":"https://git.kernel.org/stable/c/400e08a16604b534fdd82c5a288fa150d04f5f79"},{"url":"https://git.kernel.org/stable/c/7afbfde45d665953b4d5a42a721e15bf0315d89b"},{"url":"https://git.kernel.org/stable/c/b7c3cf2f6c42e6688b1c37215a0b1663f982f915"},{"url":"https://git.kernel.org/stable/c/6994f806c6d1ae8b59344d3700358547f3b3fe1d"},{"url":"https://git.kernel.org/stable/c/28062cd6eda04035d8f6ded2001292ac8b496149"},{"url":"https://git.kernel.org/stable/c/e70ba449b04b40584bdabb383d10455397cbf177"},{"url":"https://git.kernel.org/stable/c/7f72f50547b7af4ddf985b07fc56600a4deba281"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-05-11T19:49:40.994Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"4.14.326"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"4.19.295"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"5.4.257"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"5.10.197"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"5.15.133"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"6.1.55"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"6.5.5"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"3.9","versionEndExcluding":"6.6"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}