---
id: CVE-2023-52590
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ocfs2: Avoid touching renamed directory if parent does not change

  The VFS will not be locking moved directory if its parent does not
  change
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ocfs2: Avoid touching renamed directory if parent does not change

  The VFS will not be locking moved directory if its parent does not
  change. Change ocfs2 rename code t…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-667
  - CWE-413
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 6.7.4
patched:
  - linux_kernel 6.7.4
published: '2024-03-06'
updated: '2026-08-04'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2023-52590'
references:
  - url: 'https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52590.json
  - url: 'https://access.redhat.com/security/cve/CVE-2023-52590'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2268325'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2023-52590'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2023-52590'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2024030644-CVE-2023-52590-fca9@gregkh/T
  - url: 'https://git.kernel.org/stable/c/1743d5a678048735d6d0e88cdede3b88d8234725'
  - url: 'https://git.kernel.org/stable/c/a8723454ded3633f71ae35e0d5744518afc72d4a'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
epss: 0.00221
epssPercentile: 0.12533
ingestedAt: '2026-08-05T05:58:02.761Z'
scores:
  nvd: 7.8
  vendor: 7.1
  cna: 7.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-10T15:55:58.510084Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: Avoid touching renamed directory if parent does not change

The VFS will not be locking moved directory if its parent does not
change. Change ocfs2 rename code to avoid touching renamed directory if
its parent does not change as without locking that can corrupt the
filesystem.

## Affected

- `linux_kernel < 6.7.4`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.7.4`

## Vendor advisories

- **Red Hat VEX** · Low · updated 2026-09-27 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-52590.json)