
Cloud Vulnerability DB
A community-led vulnerabilities database
A vulnerability has been identified in the Linux kernel's btrfs filesystem component (CVE-2023-53339). The issue involves a race condition in the btrfs_cancel_balance function where pausing and canceling balance operations can lead to a BUG_ON panic. This vulnerability was disclosed on September 17, 2025, affecting the btrfs filesystem subsystem in the Linux kernel (NVD).
The vulnerability stems from a race condition between balance operations in the btrfs filesystem. Specifically, when pausing and canceling balance operations occur simultaneously, it can trigger a BUG_ON panic in the btrfs_cancel_balance function. The race scenario involves the mutex_unlock of fs_info->balance_mutex followed by operations in another thread, leading to an incorrect handling of the balance state (NVD).
When exploited, this vulnerability causes a kernel panic through a BUG_ON condition in the btrfs_cancel_balance function. While the race condition itself has no other side effects beyond the system panic, it can lead to system instability and potential service interruption (NVD).
The issue has been addressed through a patch that fixes the BUG_ON condition in btrfs_cancel_balance to properly handle the race scenario between pause and cancel operations (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."