Riskcovery

CVE-2023-52590

ocfs2: Avoid touching renamed directory if parent does not change

State
Published
Severity
7.8 High
Published
Mar 6, 2024
Updated
Oct 30, 2026
Reserved
Mar 2, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: Avoid touching renamed directory if parent does not change

The VFS will not be locking moved directory if its parent does not change. Change ocfs2 rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ccd979bdbce9fba8412beb3f1de68a9d0171b12c to before a8723454ded3633f71ae35e0d5744518afc72d4aAffected
  • ccd979bdbce9fba8412beb3f1de68a9d0171b12c to before 1743d5a678048735d6d0e88cdede3b88d8234725Affected
  • ccd979bdbce9fba8412beb3f1de68a9d0171b12c to before de940cede3c41624e2de27f805b490999f419df9Affected
  • ccd979bdbce9fba8412beb3f1de68a9d0171b12c to before 9d618d19b29c2943527e3a43da0a35aea91062fcAffected
LinuxLinux
  • 2.6.16Affected
  • before 2.6.16Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.7.4 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.