CVE-2023-52583

Katalog CVE

CVSS 5.5 · Medium EPSS 0,18%

Kerentanan Improper Locking pada linux kernel, debian linux. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of misusing dget() The lock order is incorrect between denty and its parent, we should always make sure that the parent get the lock first. But since this deadcode is never used and the parent dir will always be set from the callers, let's just remove it.

Rincian

Terbit di NVD

6 Maret 2024

Terakhir diubah

15 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-667: Improper Locking

EPSS (30 hari)

0,18% peluang dieksploitasi; lebih tinggi dari 7,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/196b87e5c00ce021e164a5de0f0d04f4116a9160 patch
• https://git.kernel.org/stable/c/6ab4fd508fad942f1f1ba940492f2735e078e980 patch
• https://git.kernel.org/stable/c/76cb2aa3421fee4fde706dec41b1344bc0a9ad67 patch
• https://git.kernel.org/stable/c/7f2649c94264d00df6b6ac27161e9f4372a3450e patch
• https://git.kernel.org/stable/c/a9c15d6e8aee074fae66c04d114f20b84274fcca patch
• https://git.kernel.org/stable/c/b493ad718b1f0357394d2cdecbf00a44a36fa085 patch
• https://git.kernel.org/stable/c/e016e358461b89b231626fcf78c5c38e35c44fd3 patch
• https://git.kernel.org/stable/c/eb55ba8aa7fb7aad54f40fbf4d8dcdfdba0bebf6 patch
• https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html mailing list
• https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html mailing list