{
  "cveId": "CVE-2023-52759",
  "url": "https://patchblox.com/security/cve/CVE-2023-52759",
  "summary": "CVE-2023-52759 is fixed in 22 products on 1 platform, first by CVE-2023-52759, released May 21, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: ignore negated quota changes\n\nWhen lots of...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: ignore negated quota changes\n\nWhen lots of quota changes are made, there may be cases in which an\ninode\u0027s quota information is increased and then decreased, such as when\nblocks are added to a file, then deleted from it. If the timing is\nright, function do_qc can add pending quota changes to a transaction,\nthen later, another call to do_qc can negate those changes, resulting\nin a net gain of 0. The quota_change information is recorded in the qc\nbuffer (and qd element of the inode as well). The buffer is added to the\ntransaction by the first call to do_qc, but a subsequent call changes\nthe value from non-zero back to zero. At that point it\u0027s too late to\nremove the buffer_head from the transaction. Later, when the quota sync\ncode is called, the zero-change qd element is discovered and flagged as\nan assert warning. If the fs is mounted with errors=panic, the kernel\nwill panic.\n\nThis is usually seen when files are truncated and the quota changes are\nnegated by punch_hole/truncate which uses gfs2_quota_hold and\ngfs2_quota_unhold rather than block allocations that use gfs2_quota_lock\nand gfs2_quota_unlock which automatically do quota sync.\n\nThis patch solves the problem by adding a check to qd_check_sync such\nthat net-zero quota changes already added to the transaction are no\nlonger deemed necessary to be synced, and skipped.\n\nIn this case references are taken for the qd and the slot from do_qc\nso those need to be put. The normal sequence of events for a normal\nnon-zero quota change is as follows:\n\ngfs2_quota_change\n   do_qc\n      qd_hold\n      slot_hold\n\nLater, when the changes are to be synced:\n\ngfs2_quota_sync\n   qd_fish\n      qd_check_sync\n         gets qd ref via lockref_get_not_dead\n   do_sync\n      do_qc(QC_SYNC)\n         qd_put\n\t    lockref_put_or_lock\n   qd_unlock\n      qd_put\n         lockref_put_or_lock\n\nIn the net-zero change case, we add a check to qd_check_sync so it puts\nthe qd and slot references acquired in gfs2_quota_change and skip the\nunneeded sync.",
  "published": "2024-05-21T16:15:15Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "dtb-aarch64",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.1",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.1",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-64kb",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.1",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.8.2",
      "fix": "SUSE-SU-2024:2896-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2896-1",
      "released": "2024-08-13T14:09:50Z"
    },
    {
      "platform": "linux",
      "product": "kernel-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.8.2",
      "fix": "SUSE-SU-2024:2896-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2896-1",
      "released": "2024-08-13T14:09:50Z"
    },
    {
      "platform": "linux",
      "product": "kernel-debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2.150600.12.4.3",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-default-base",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2.150600.12.4.3",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-docs",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-kvmsmall",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6-RT_Update_1",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.1.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-SLE15-SP6_Update_2",
      "release": "sles 15.6",
      "fixedVersion": "1-150600.13.3.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-build",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-obs-qa",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-rt_debug",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.8.2",
      "fix": "SUSE-SU-2024:2896-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2896-1",
      "released": "2024-08-13T14:09:50Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.8.2",
      "fix": "SUSE-SU-2024:2896-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2896-1",
      "released": "2024-08-13T14:09:50Z"
    },
    {
      "platform": "linux",
      "product": "kernel-source-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.8.8.1",
      "fix": "SUSE-SU-2024:2896-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2896-1",
      "released": "2024-08-13T14:09:50Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-azure",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.8.8.1",
      "fix": "SUSE-SU-2024:2896-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2896-1",
      "released": "2024-08-13T14:09:50Z"
    },
    {
      "platform": "linux",
      "product": "kernel-syms-rt",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.10.5.1",
      "fix": "SUSE-SU-2024:2973-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2973-1",
      "released": "2024-08-20T07:15:53Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "kernel-zfcpdump",
      "release": "sles 15.6",
      "fixedVersion": "6.4.0-150600.23.14.2",
      "fix": "SUSE-SU-2024:2571-1",
      "url": "https://patchblox.com/security/fix/linux/suse-su-2024-2571-1",
      "released": "2024-07-22T10:34:18Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "5.10.205-1",
      "fix": "CVE-2023-52759",
      "url": "https://patchblox.com/security/fix/linux/cve-2023-52759",
      "released": "2024-05-21T16:15:15Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.64-1",
      "fix": "CVE-2023-52759",
      "url": "https://patchblox.com/security/fix/linux/cve-2023-52759",
      "released": "2024-05-21T16:15:15Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.6.8-1",
      "fix": "CVE-2023-52759",
      "url": "https://patchblox.com/security/fix/linux/cve-2023-52759",
      "released": "2024-05-21T16:15:15Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}