{"id":"DEBIAN-CVE-2023-53270","details":"In the Linux kernel, the following vulnerability has been resolved:  ext4: fix i_disksize exceeding i_size problem in paritally written case  It is possible for i_disksize can exceed i_size, triggering a warning.  generic_perform_write  copied = iov_iter_copy_from_user_atomic(len) // copied \u003c len  ext4_da_write_end  | ext4_update_i_disksize  |  new_i_size = pos + copied;  |  WRITE_ONCE(EXT4_I(inode)-\u003ei_disksize, newsize) // update i_disksize  | generic_write_end  |  copied = block_write_end(copied, len) // copied = 0  |   if (unlikely(copied \u003c len))  |    if (!PageUptodate(page))  |     copied = 0;  |  if (pos + copied \u003e inode-\u003ei_size) // return false  if (unlikely(copied == 0))   goto again;  if (unlikely(iov_iter_fault_in_readable(i, bytes))) {   status = -EFAULT;   break;  }  We get i_disksize greater than i_size here, which could trigger WARNING check 'i_size_read(inode) \u003c EXT4_I(inode)-\u003ei_disksize' while doing dio:  ext4_dio_write_iter  iomap_dio_rw   __iomap_dio_rw // return err, length is not aligned to 512  ext4_handle_inode_extension   WARN_ON_ONCE(i_size_read(inode) \u003c EXT4_I(inode)-\u003ei_disksize) // Oops   WARNING: CPU: 2 PID: 2609 at fs/ext4/file.c:319  CPU: 2 PID: 2609 Comm: aa Not tainted 6.3.0-rc2  RIP: 0010:ext4_file_write_iter+0xbc7  Call Trace:   vfs_write+0x3b1   ksys_write+0x77   do_syscall_64+0x39  Fix it by updating 'copied' value before updating i_disksize just like ext4_write_inline_data_end() does.  A reproducer can be found in the buganizer link below.","modified":"2026-09-15T09:02:50.864245336Z","published":"2025-09-16T08:15:35.790Z","upstream":["CVE-2023-53270"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2023-53270"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.37-1"}]}],"versions":["6.1.27-1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53270.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53270.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.3.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2023-53270.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}