{
  "cveId": "CVE-2023-53329",
  "url": "https://patchblox.com/security/cve/CVE-2023-53329",
  "summary": "CVE-2023-53329 is fixed in linux on 1 platform, first by DEBIAN-CVE-2023-53329, released September 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  workqueue: fix data race with the pwq-\u003Estats[] i...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  workqueue: fix data race with the pwq-\u003Estats[] increment  KCSAN has discovered a data race in kernel/workqueue.c:2598:  [ 1863.554079] ================================================================== [ 1863.554118] BUG: KCSAN: data-race in process_one_work / process_one_work  [ 1863.554142] write to 0xffff963d99d79998 of 8 bytes by task 5394 on cpu 27: [ 1863.554154] process_one_work (kernel/workqueue.c:2598) [ 1863.554166] worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2752) [ 1863.554177] kthread (kernel/kthread.c:389) [ 1863.554186] ret_from_fork (arch/x86/kernel/process.c:145) [ 1863.554197] ret_from_fork_asm (arch/x86/entry/entry_64.S:312)  [ 1863.554213] read to 0xffff963d99d79998 of 8 bytes by task 5450 on cpu 12: [ 1863.554224] process_one_work (kernel/workqueue.c:2598) [ 1863.554235] worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2752) [ 1863.554247] kthread (kernel/kthread.c:389) [ 1863.554255] ret_from_fork (arch/x86/kernel/process.c:145) [ 1863.554266] ret_from_fork_asm (arch/x86/entry/entry_64.S:312)  [ 1863.554280] value changed: 0x0000000000001766 -\u003E 0x000000000000176a  [ 1863.554295] Reported by Kernel Concurrency Sanitizer on: [ 1863.554303] CPU: 12 PID: 5450 Comm: kworker/u64:1 Tainted: G             L     6.5.0-rc6\u002B #44 [ 1863.554314] Hardware name: ASRock X670E PG Lightning/X670E PG Lightning, BIOS 1.21 04/26/2023 [ 1863.554322] Workqueue: btrfs-endio btrfs_end_bio_work [btrfs] [ 1863.554941] ==================================================================      lockdep_invariant_state(true); \u2192   pwq-\u003Estats[PWQ_STAT_STARTED]\u002B\u002B;     trace_workqueue_execute_start(work);     worker-\u003Ecurrent_func(work);  Moving pwq-\u003Estats[PWQ_STAT_STARTED]\u002B\u002B; before the line      raw_spin_unlock_irq(\u0026pool-\u003Elock);  resolves the data race without performance penalty.  KCSAN detected at least one additional data race:  [  157.834751] ================================================================== [  157.834770] BUG: KCSAN: data-race in process_one_work / process_one_work  [  157.834793] write to 0xffff9934453f77a0 of 8 bytes by task 468 on cpu 29: [  157.834804] process_one_work (/home/marvin/linux/kernel/linux_torvalds/kernel/workqueue.c:2606) [  157.834815] worker_thread (/home/marvin/linux/kernel/linux_torvalds/./include/linux/list.h:292 /home/marvin/linux/kernel/linux_torvalds/kernel/workqueue.c:2752) [  157.834826] kthread (/home/marvin/linux/kernel/linux_torvalds/kernel/kthread.c:389) [  157.834834] ret_from_fork (/home/marvin/linux/kernel/linux_torvalds/arch/x86/kernel/process.c:145) [  157.834845] ret_from_fork_asm (/home/marvin/linux/kernel/linux_torvalds/arch/x86/entry/entry_64.S:312)  [  157.834859] read to 0xffff9934453f77a0 of 8 bytes by task 214 on cpu 7: [  157.834868] process_one_work (/home/marvin/linux/kernel/linux_torvalds/kernel/workqueue.c:2606) [  157.834879] worker_thread (/home/marvin/linux/kernel/linux_torvalds/./include/linux/list.h:292 /home/marvin/linux/kernel/linux_torvalds/kernel/workqueue.c:2752) [  157.834890] kthread (/home/marvin/linux/kernel/linux_torvalds/kernel/kthread.c:389) [  157.834897] ret_from_fork (/home/marvin/linux/kernel/linux_torvalds/arch/x86/kernel/process.c:145) [  157.834907] ret_from_fork_asm (/home/marvin/linux/kernel/linux_torvalds/arch/x86/entry/entry_64.S:312)  [  157.834920] value changed: 0x000000000000052a -\u003E 0x0000000000000532  [  157.834933] Reported by Kernel Concurrency Sanitizer on: [  157.834941] CPU: 7 PID: 214 Comm: kworker/u64:2 Tainted: G             L     6.5.0-rc7-kcsan-00169-g81eaf55a60fc #4 [  157.834951] Hardware name: ASRock X670E PG Lightning/X670E PG Lightning, BIOS 1.21 04/26/2023 [  157.834958] Workqueue: btrfs-endio btrfs_end_bio_work [btrfs] [  157.835567] ==================================================================  in code:          trace_workqueue_execute_end(work, worker-\u003Ecurrent_func); \u2192       pwq-\u003Estats[PWQ_STAT_COM ---truncated---",
  "published": "2025-09-16T17:15:39Z",
  "severity": "medium",
  "cvss": 4.7,
  "cvssVector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00095,
  "epssPercentile": 0.00609,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.5.3-1",
      "fix": "DEBIAN-CVE-2023-53329",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53329",
      "released": "2025-09-16T17:15:39Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.5.3-1",
      "fix": "DEBIAN-CVE-2023-53329",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2023-53329",
      "released": "2025-09-16T17:15:39Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}