PT-2023-8696 · Linux+5 · Linux Kernel+5

Al Viro

·

Publicado

2023-11-28

·

Atualizado

2025-09-29

·

CVE-2023-52444

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the f2fs rename() function in the Linux kernel, which can cause dirent corruption due to a missed call to f2fs set link() to update the ".." link to the new directory. This can occur when performing a cross-directory rename operation. The vulnerability may allow an attacker to elevate their privileges.
Technical details about exploitation include:
  • The f2fs rename() function is vulnerable.
  • The old dir and new dir variables are used in the function.
  • The f2fs set link() function is not called in certain cases, leading to the corruption.
  • A testcase involving mkdir -p dir/foo and renameat2 -w dir/foo bar can cause the corruption.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Assertion Failure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119CWE-617CWE-19

Identificadores relacionados

ALSA-2025_16880
ALT-PU-2024-17576
ALT-PU-2024-3291
ALT-PU-2024-4263
ALT-PU-2024-4623
ALT-PU-2024-4843
BDU:2024-01590
CVE-2023-52444
DLA-3840-1
DLA-3841-1
OESA-2024-2255
OESA-2024-2256
USN-6688-1
USN-6725-1
USN-6725-2
USN-6726-1
USN-6726-2
USN-6726-3
USN-6765-1
USN-6818-1
USN-6818-2
USN-6818-3
USN-6818-4
USN-6819-1
USN-6819-2
USN-6819-3
USN-6819-4
USN-6926-1
USN-6926-2
USN-6926-3
USN-6938-1

Produtos afetados

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu