What’s Vulnerable › Vulnerabilities

CVE-2023-52591: reiserfs: Avoid touching renamed directory if parent does not change

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-03-06 · updated 2026-10-30

Description

In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

Affected products

• Linux kernel: before 6.6.16; from 6.7 before 6.7.4 — fixed in 6.6.16, 6.7.4
• Linux: 2.6.12 — fixed in 6.8

How to fix

Upgrade to a fixed version: Linux kernel 6.6.16, 6.7.4; Linux 6.8. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debc
• https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8ed
• https://git.kernel.org/stable/c/9de2e9fcede300579b9b65139d669ccdc134a459
• https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7c
• https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debc
• https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8ed
• https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7c

Get alerted when CVE-2023-52591 or the next vulnerability affects your stack