CVE-2023-52591
In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.24%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debcPatch
- https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8edPatch
- https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7cPatch
- https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debcPatch
- https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8edPatch
- https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7cPatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.