CVE-2023-54023: 
Linux Kernel vulnerability analysis and mitigation

CVE-2023-54023 is a race condition vulnerability in the Linux kernel's Btrfs filesystem subsystem, specifically between the balance operation and cancel/pause operations. The flaw was published on December 24, 2025, and affects the Linux kernel in versions that include the vulnerable Btrfs balance/cancel/pause logic in fs/btrfs/ioctl.c. It was originally discovered via Syzbot (Google's kernel fuzzer), which reported a kernel panic triggered by running balance and cancel/pause concurrently. The vulnerability has an estimated CVSS severity of Medium and an EPSS score of approximately 0.017% (Feedly, CVE.org).

The root cause is a race condition (CWE-362) in the Btrfs balance ioctl handler (btrfs_ioctl_balance in fs/btrfs/ioctl.c). When a balance operation completes and returns 0 (success), but a concurrent cancel or pause request is also in flight, the cleanup logic incorrectly assumes specific return values or request states. Specifically, if balance completes normally but a pause or cancel flag is set, the code skips the appropriate cleanup of balance_ctl in fs_info, leading to a failed assertion (fs_info->exclusive_operation == BTRFS_EXCLOP_BALANCE_PAUSED) and a kernel BUG/panic. Exploitation requires local access and the ability to issue concurrent Btrfs ioctls (Feedly). Fixes were committed to the stable kernel tree at multiple commits (e.g., 72efe5d44821, b19c98f237cd, ddf7e8984c83) (Linux Kernel Git).

Successful exploitation causes a kernel panic (BUG assertion failure), resulting in a denial of service (system crash) on the affected host. The impact is limited to availability — there is no evidence of code execution, privilege escalation, or data exfiltration as a direct result of this vulnerability. Systems running Btrfs filesystems and exposed to local users who can issue concurrent balance and cancel/pause ioctls are at risk (Feedly).

Apply the upstream Linux kernel patches that fix the race condition in fs/btrfs/ioctl.c. The fixes are available in the stable kernel tree at commits 72efe5d44821, b19c98f237cd, and ddf7e8984c83 (Linux Kernel Git). SUSE has issued kernel advisories (SUSE-2026-0281-1 and SUSE-2026-20876-1) incorporating these fixes (Linux Security SUSE). As a workaround, avoid running concurrent Btrfs balance and cancel/pause operations on unpatched systems, or restrict local user access to Btrfs ioctl operations.