Log in Start free

Vulnerability · Published Mar 6, 2024 · Assigned by Linux

CVE-2023-52590ocfs2: Avoid touching renamed directory if parent does not change

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 87.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change ocfs2 rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linuxno fix listedDEBIAN-CVE-2023-52590
Debian:13linux6.7.7-1DEBIAN-CVE-2023-52590
Debian:14linux6.7.7-1DEBIAN-CVE-2023-52590
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2023-52590
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2023-52590

Affected products (as reported)

VendorProductVersions
Linux Linux ccd979bdbce9fba8412beb3f1de68a9d0171b12c – before a8723454ded3633f71ae35e0d5744518afc72d4accd979bdbce9fba8412beb3f1de68a9d0171b12c – before 1743d5a678048735d6d0e88cdede3b88d8234725ccd979bdbce9fba8412beb3f1de68a9d0171b12c – before de940cede3c41624e2de27f805b490999f419df9ccd979bdbce9fba8412beb3f1de68a9d0171b12c – before 9d618d19b29c2943527e3a43da0a35aea91062fc
Linux Linux 2.6.16

References