- Vulnerability/
- CVE-2023-53129
CVE-2023-53129: ext4: Fix deadlock during directory rename
First published: Fri May 02 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: ext4: Fix deadlock during directory rename As lockdep properly warns, we should not be locking i_rwsem while having transactions started as the proper lock ordering used by all directory handling operations is i_rwsem -> transaction start. Fix the lock ordering by moving the locking of the directory earlier in ext4_rename().
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/6b06c4ae64e3557a19b3bb0b6dbf641bc41fc218
- https://git.kernel.org/stable/c/b113f90204479f55a17295bedf0cc966a60c7a56
- https://git.kernel.org/stable/c/a2bc806e95bde8de3a0d675051d9ae78dcf6c691
- https://git.kernel.org/stable/c/2ef7f829214fa8f428d953b49557b89b2b02db66
- https://git.kernel.org/stable/c/352c728653a1179ce7bb37a4c8aa8404d83914a2
- https://git.kernel.org/stable/c/3c92792da8506a295afb6d032b4476e46f979725
Frequently Asked Questions
What is the severity of CVE-2023-53129?
CVE-2023-53129 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2023-53129?
To fix CVE-2023-53129, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2023-53129?
CVE-2023-53129 affects the Linux kernel, specifically systems that utilize the ext4 filesystem.
What types of attacks can exploit CVE-2023-53129?
CVE-2023-53129 can potentially be exploited to cause deadlocks during directory rename operations in the ext4 filesystem.
Is there a known workaround for CVE-2023-53129?
Currently, the recommended approach for CVE-2023-53129 is to apply the official patch by updating the kernel.
- collector/mitre-cve
- source/MITRE
- agent/title
- agent/type
- agent/references
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/author
- agent/source
- agent/last-modified-date
- agent/tags
- agent/event
- vendor/linux
- canonical/linux kernel