PT-2023-8696 · Linux+5 · Linux Kernel+5

Al Viro

·

Published

2023-11-28

·

Updated

2025-09-29

·

CVE-2023-52444

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to the f2fs rename() function in the Linux kernel, which can cause dirent corruption due to a missed call to f2fs set link() to update the ".." link to the new directory. This can occur when performing a cross-directory rename operation. The vulnerability may allow an attacker to elevate their privileges.
Technical details about exploitation include:
  • The f2fs rename() function is vulnerable.
  • The old dir and new dir variables are used in the function.
  • The f2fs set link() function is not called in certain cases, leading to the corruption.
  • A testcase involving mkdir -p dir/foo and renameat2 -w dir/foo bar can cause the corruption.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Assertion Failure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119CWE-617CWE-19

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-17576
ALT-PU-2024-3291
ALT-PU-2024-4263
ALT-PU-2024-4623
ALT-PU-2024-4843
BDU:2024-01590
CVE-2023-52444
DLA-3840-1
DLA-3841-1
OESA-2024-2255
OESA-2024-2256
USN-6688-1
USN-6725-1
USN-6725-2
USN-6726-1
USN-6726-2
USN-6726-3
USN-6765-1
USN-6818-1
USN-6818-2
USN-6818-3
USN-6818-4
USN-6819-1
USN-6819-2
USN-6819-3
USN-6819-4
USN-6926-1
USN-6926-2
USN-6926-3
USN-6938-1

Affected Products

Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu