CVE-2023-52583

MEDIUM

Linux Kernel < 4.19.307 - Deadlock via Incorrect Dentry Lock Order

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of misusing dget() The lock order is incorrect between denty and its parent, we should always make sure that the parent get the lock first. But since this deadcode is never used and the parent dir will always be set from the callers, let's just remove it.

References (10)

Core 10
Core References

Scores

CVSS v3 5.5
EPSS 0.0001
EPSS Percentile 1.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-667
Status published
Products (20)
debian/debian_linux 10.0
Linux/Linux < 2.6.34
Linux/Linux 2.6.34
Linux/Linux 4.19.307 - 4.19.*
Linux/Linux 5.10.210 - 5.10.*
Linux/Linux 5.15.149 - 5.15.*
Linux/Linux 5.4.269 - 5.4.*
Linux/Linux 6.1.77 - 6.1.*
Linux/Linux 6.6.16 - 6.6.*
Linux/Linux 6.7.4 - 6.7.*
... and 10 more
Published Mar 06, 2024
Tracked Since Feb 18, 2026