CVE-2023-52591: reiserfs: Avoid touching renamed directory if parent does not change

Q: What is the severity of CVE-2023-52591?

CVE-2023-52591 is classified as a moderate severity vulnerability in the Linux kernel.

Q: How do I fix CVE-2023-52591?

To fix CVE-2023-52591, upgrade to the fixed versions of the linux package: 6.12.11-1 or 6.12.12-1.

Q: Which Linux kernel versions are affected by CVE-2023-52591?

CVE-2023-52591 affects linux kernel versions up to and including 5.10.226-1 and 6.1.123-1.

Q: What is the nature of the vulnerability described in CVE-2023-52591?

CVE-2023-52591 involves improper handling of renamed directories in the reiserfs filesystem.

Q: Is CVE-2023-52591 already patched?

Yes, CVE-2023-52591 has been resolved in the newer releases of the Linux kernel.

Published Mar 6, 2024

Updated

In the Linux kernel, the following vulnerability has been resolved:

reiserfs: Avoid touching renamed directory if parent does not change

The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem.

Affected Software

180 affected componentsFixes available

Linux Linux kernel<6.6.16

Linux Linux kernel>=6.7<6.7.4

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-azure*

ubuntu/linux-lts-xenial*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-hwe*

ubuntu/linux-azure*

ubuntu/linux-gcp*

ubuntu/linux-hwe*

ubuntu/linux-hwe-edge*

ubuntu/linux-kvm*

ubuntu/linux-oracle*

ubuntu/linux-fips*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.0*

ubuntu/linux-aws-5.3*

ubuntu/linux-aws-5.4*

ubuntu/linux-azure*

ubuntu/linux-azure-4.15*

ubuntu/linux-azure-5.3*

ubuntu/linux-azure-5.4*

ubuntu/linux-azure-edge*

ubuntu/linux-gcp*

ubuntu/linux-gcp-4.15*

ubuntu/linux-gcp-5.3*

ubuntu/linux-gcp-5.4*

ubuntu/linux-gke-4.15*

ubuntu/linux-gke-5.4*

ubuntu/linux-gkeop-5.4*

ubuntu/linux-hwe*

ubuntu/linux-hwe-5.4*

ubuntu/linux-hwe-edge*

ubuntu/linux-ibm-5.4*

ubuntu/linux-kvm*

ubuntu/linux-oem*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.0*

ubuntu/linux-oracle-5.3*

ubuntu/linux-oracle-5.4*

ubuntu/linux-raspi-5.4*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux*

ubuntu/linux-aws*

ubuntu/linux-aws-5.11*

ubuntu/linux-aws-5.13*

ubuntu/linux-aws-5.15*

ubuntu/linux-aws-5.8*

ubuntu/linux-azure*

ubuntu/linux-azure-5.11*

ubuntu/linux-azure-5.13*

ubuntu/linux-azure-5.15*

ubuntu/linux-azure-5.8*

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.15*

ubuntu/linux-bluefield*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.11*

ubuntu/linux-gcp-5.13*

ubuntu/linux-gcp-5.15*

ubuntu/linux-gcp-5.8*

ubuntu/linux-gke*

ubuntu/linux-gke-5.15*

ubuntu/linux-gkeop*

ubuntu/linux-gkeop-5.15*

ubuntu/linux-hwe-5.11*

ubuntu/linux-hwe-5.13*

ubuntu/linux-hwe-5.15*

ubuntu/linux-hwe-5.8*

ubuntu/linux-ibm*

ubuntu/linux-ibm-5.15*

ubuntu/linux-intel-5.13*

ubuntu/linux-intel-iotg-5.15*

ubuntu/linux-iot*

ubuntu/linux-kvm*

ubuntu/linux-lowlatency-hwe-5.15*

ubuntu/linux-nvidia-tegra-5.15*

ubuntu/linux-oem-5.10*

ubuntu/linux-oem-5.13*

ubuntu/linux-oem-5.6*

ubuntu/linux-oracle*

ubuntu/linux-oracle-5.11*

ubuntu/linux-oracle-5.13*

ubuntu/linux-oracle-5.15*

ubuntu/linux-oracle-5.8*

ubuntu/linux-raspi*

ubuntu/linux-raspi2*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.11*

ubuntu/linux-riscv-5.15*

ubuntu/linux-riscv-5.8*

ubuntu/linux-xilinx-zynqmp*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux*

ubuntu/linux-allwinner-5.19*

ubuntu/linux-aws*

ubuntu/linux-aws-5.19*

ubuntu/linux-aws-6.2*

ubuntu/linux-aws-6.5*

ubuntu/linux-azure*

ubuntu/linux-azure-5.19*

ubuntu/linux-azure-6.2*

ubuntu/linux-azure-6.5<6.5.0-1022.23~22.04.1

6.5.0-1022.23~22.04.1

ubuntu/linux-azure-fde*

ubuntu/linux-azure-fde-5.19*

ubuntu/linux-azure-fde-6.2*

ubuntu/linux-gcp*

ubuntu/linux-gcp-5.19*

ubuntu/linux-gcp-6.2*

ubuntu/linux-gcp-6.5<6.5.0-1022.24~22.04.1

6.5.0-1022.24~22.04.1

ubuntu/linux-gke*

ubuntu/linux-gkeop*

ubuntu/linux-hwe-5.19*

ubuntu/linux-hwe-6.2*

ubuntu/linux-hwe-6.5<6.5.0-41.41~22.04.2

6.5.0-41.41~22.04.2

ubuntu/linux-ibm*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-intel-iotg*

ubuntu/linux-kvm*

ubuntu/linux-lowlatency*

ubuntu/linux-lowlatency-hwe-5.19*

ubuntu/linux-lowlatency-hwe-6.2*

ubuntu/linux-lowlatency-hwe-6.5<6.5.0-41.41.1~22.04.1

6.5.0-41.41.1~22.04.1

ubuntu/linux-nvidia*

ubuntu/linux-nvidia-6.2*

ubuntu/linux-nvidia-6.5<6.5.0-1021.22

6.5.0-1021.22

ubuntu/linux-nvidia-tegra*

ubuntu/linux-nvidia-tegra-igx*

ubuntu/linux-oem-5.17*

ubuntu/linux-oem-6.0*

ubuntu/linux-oem-6.1*

ubuntu/linux-oem-6.5<6.5.0-1024.25

6.5.0-1024.25

ubuntu/linux-oracle*

ubuntu/linux-oracle-6.5<6.5.0-1024.24~22.04.1

6.5.0-1024.24~22.04.1

ubuntu/linux-raspi*

ubuntu/linux-realtime*

ubuntu/linux-riscv*

ubuntu/linux-riscv-5.19*

ubuntu/linux-riscv-6.5<6.5.0-40.40.1~22.04.1

6.5.0-40.40.1~22.04.1

ubuntu/linux-starfive-5.19*

ubuntu/linux-starfive-6.2*

ubuntu/linux-starfive-6.5<6.5.0-1015.16~22.04.1

6.5.0-1015.16~22.04.1

ubuntu/linux-xilinx-zynqmp*

ubuntu/linux-bluefield*

ubuntu/linux-intel-iot-realtime*

ubuntu/linux-realtime*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-aws-fips*

ubuntu/linux-azure-fips*

ubuntu/linux-fips*

ubuntu/linux-gcp-fips*

ubuntu/linux-raspi-realtime<6.8.0-2001.1

6.8.0-2001.1

debian/linux*

debian/linux<6.7.7-1

6.7.7-1

debian/linux<6.7.7-1

6.7.7-1

linux/kernel>=2.6.12<6.1.191

6.1.191

linux/kernel>=6.2.0<6.6.16

6.6.16

linux/kernel>=6.7.0<6.7.4

6.7.4

debian/linux<=6.1.176-1, <=6.1.190-1

6.12.107-16.12.115-27.2.12-17.2.15-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-azure-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1022.23~22.04.1
Upgrade
Upgrade ubuntu/linux-gcp-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1022.24~22.04.1
Upgrade
Upgrade ubuntu/linux-hwe-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-41.41~22.04.2
Upgrade
Upgrade ubuntu/linux-lowlatency-hwe-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-41.41.1~22.04.1
Upgrade
Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1021.22
Upgrade
Upgrade ubuntu/linux-oem-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1024.25
Upgrade
Upgrade ubuntu/linux-oracle-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1024.24~22.04.1
Upgrade
Upgrade ubuntu/linux-riscv-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-40.40.1~22.04.1
Upgrade
Upgrade ubuntu/linux-starfive-6.5 to a version that resolves this vulnerability.
Fixed in 6.5.0-1015.16~22.04.1
Upgrade
Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.
Fixed in 6.8.0-2001.1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.7.7-1
Upgrade
Upgrade debian/linux to a version that resolves this vulnerability.
Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.14-1
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.1.191
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.6.16
Upgrade
Upgrade linux/Kernel to a version that resolves this vulnerability.
Fixed in 6.7.4

Event History

Mar 6, 2024

CVE Published

via MITRE·06:45 AM

Data Sourced

via MITRE·06:45 AM

DescriptionSeverity

Data Sourced

via OSV·06:45 AM

DescriptionSeverityAffected Software

Data Sourced

via NVD·07:15 AM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-52591?

CVE-2023-52591 is classified as a moderate severity vulnerability in the Linux kernel.

How do I fix CVE-2023-52591?

To fix CVE-2023-52591, upgrade to the fixed versions of the linux package: 6.12.11-1 or 6.12.12-1.

Which Linux kernel versions are affected by CVE-2023-52591?

CVE-2023-52591 affects linux kernel versions up to and including 5.10.226-1 and 6.1.123-1.

What is the nature of the vulnerability described in CVE-2023-52591?

CVE-2023-52591 involves improper handling of renamed directories in the reiserfs filesystem.

Is CVE-2023-52591 already patched?

Yes, CVE-2023-52591 has been resolved in the newer releases of the Linux kernel.

CVE-2023-52591: reiserfs: Avoid touching renamed directory if parent does not change

Affected Software

Remediation

Event History

Frequently Asked Questions

What is the severity of CVE-2023-52591?

How do I fix CVE-2023-52591?

Which Linux kernel versions are affected by CVE-2023-52591?

What is the nature of the vulnerability described in CVE-2023-52591?

Is CVE-2023-52591 already patched?

Company

Resources

Contact