Riskcovery

CVE-2023-52591

reiserfs: Avoid touching renamed directory if parent does not change

State
Published
Severity
7.8 High
Published
Mar 6, 2024
Updated
Oct 30, 2026
Reserved
Mar 2, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

reiserfs: Avoid touching renamed directory if parent does not change

The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCISA-ADP

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 9de2e9fcede300579b9b65139d669ccdc134a459Affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 17e1361cb91dc1325834da95d2ab532959d2debcAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c04c162f82ac403917780eb6d1654694455d4e7cAffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49db9b1b86a82448dfaf3fcfefcf678dee56c8edAffected
LinuxLinux
  • 2.6.12Affected
  • before 2.6.12Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.16 through 6.6.*Not affected
  • 6.7.4 through 6.7.*Not affected
  • 6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.