{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.6.15-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.6.15-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  btrfs: zoned: fix lock ordering in btrfs_zone_activate()  The btrfs CI reported a lockdep warning as follows by running generic generic/129.     WARNING: possible circular locking dependency detected    6.7.0-rc5+ #1 Not tainted    ------------------------------------------------------    kworker/u5:5/793427 is trying to acquire lock:    ffff88813256d028 (\u0026cache-\u003elock){+.+.}-{2:2}, at: btrfs_zone_finish_one_bg+0x5e/0x130    but task is already holding lock:    ffff88810a23a318 (\u0026fs_info-\u003ezone_active_bgs_lock){+.+.}-{2:2}, at: btrfs_zone_finish_one_bg+0x34/0x130    which lock already depends on the new lock.     the existing dependency chain (in reverse order) is:    -\u003e #1 (\u0026fs_info-\u003ezone_active_bgs_lock){+.+.}-{2:2}:    ...    -\u003e #0 (\u0026cache-\u003elock){+.+.}-{2:2}:    ...  This is because we take fs_info-\u003ezone_active_bgs_lock after a block_group's lock in btrfs_zone_activate() while doing the opposite in other places.  Fix the issue by expanding the fs_info-\u003ezone_active_bgs_lock's critical section and taking it before a block_group's lock.",
  "id": "DEBIAN-CVE-2023-52668",
  "modified": "2026-09-15T08:47:37.079342333Z",
  "published": "2024-05-17T14:15:09.640Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2023-52668"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "upstream": [
    "CVE-2023-52668"
  ]
}