CVE-2023-52591

HIGH

Linux Kernel - Filesystem Corruption via ReiserFS Rename Race Condition

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debc

Patch

https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7c

Patch

https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8ed

Scores

CVSS v3 7.8

EPSS 0.0024

EPSS Percentile 15.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (11)

linux/Kernel 2.6.12 - 6.6.16linux

linux/Kernel 6.7.0 - 6.7.4linux

Linux/Linux < 2.6.12

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 17e1361cb91dc1325834da95d2ab532959d2debc

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 49db9b1b86a82448dfaf3fcfefcf678dee56c8ed

Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - c04c162f82ac403917780eb6d1654694455d4e7c

Linux/Linux 2.6.12

Linux/Linux 6.6.16 - 6.6.*

Linux/Linux 6.7.4 - 6.7.*

Linux/Linux 6.8

... and 1 more

Published Mar 06, 2024

Tracked Since Feb 18, 2026