Vulnerability in Linux
CVE-2023-52590
In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change ocfs2 rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.
EPSS: 0.002 (5.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Linux — versions ccd979bdbce9fba8412beb3f1de68a9d0171b12c, 2.6.16, 0
- Linux Linux_kernel
Weakness classification (CWE)
Public proof-of-concept exploits
References
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch, Mailing List)
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Patch, Mailing List)
Frequently asked questions
- What is CVE-2023-52590?
- CVE-2023-52590 is a high-severity vulnerability in Linux, classified under Improper Locking. CVSS score: 7.8/10. Published 2024-03-06.
- How severe is CVE-2023-52590?
- High severity. CVSS v3 base score is 7.8 out of 10.
- Is CVE-2023-52590 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.