{"id":"CVE-2023-52591","title":"reiserfs: Avoid touching renamed directory if parent does not change","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nreiserfs: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change reiserfs rename …","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9de2e9fcede300579b9b65139d669ccdc134a459","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 17e1361cb91dc1325834da95d2ab532959d2debc","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c04c162f82ac403917780eb6d1654694455d4e7c","Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 49db9b1b86a82448dfaf3fcfefcf678dee56c8ed","Linux 2.6.12"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-03-06T16:59:49.754179Z"},"published":"2024-03-06","updated":"2026-10-30","sourceUpdated":"2026-10-30T12:17:17.688Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2023-52591","references":[{"url":"https://git.kernel.org/stable/c/9de2e9fcede300579b9b65139d669ccdc134a459"},{"url":"https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debc"},{"url":"https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7c"},{"url":"https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8ed"}],"tags":["cve.org"],"epss":0.00275,"epssPercentile":0.20044,"ingestedAt":"2026-11-03T11:43:15.782Z","slug":"CVE-2023-52591","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nreiserfs: Avoid touching renamed directory if parent does not change\n\nThe VFS will not be locking moved directory if its parent does not\nchange. Change reiserfs rename code to avoid touching renamed directory\nif its parent does not change as without locking that can corrupt the\nfilesystem.\n\n## Affected\n\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9de2e9fcede300579b9b65139d669ccdc134a459`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 17e1361cb91dc1325834da95d2ab532959d2debc`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c04c162f82ac403917780eb6d1654694455d4e7c`\n- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 49db9b1b86a82448dfaf3fcfefcf678dee56c8ed`\n- `Linux 2.6.12`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}