What’s Vulnerable › Vulnerabilities

CVE-2023-52590: ocfs2: Avoid touching renamed directory if parent does not change

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-06 · updated 2026-10-30
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change ocfs2 rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

Affected products

• Linux kernel: before 6.7.4 — fixed in 6.7.4
• Linux: 2.6.16 — fixed in 6.8

How to fix

Upgrade to a fixed version: Linux kernel 6.7.4; Linux 6.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1743d5a678048735d6d0e88cdede3b88d8234725
• https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc
• https://git.kernel.org/stable/c/a8723454ded3633f71ae35e0d5744518afc72d4a
• https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9
• https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc
• https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9

Get alerted when CVE-2023-52590 or the next vulnerability affects your stack