CVE-2023-52444

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the f2fs rename() function of the f2fs component. The flaw occurs during cross-directory renames when the system fails to call f2fs set link() to update the .. link to the new directory, particularly when a whiteout is requested. This can lead to dirent corruption, where the inode number for the parent directory is incorrect. Exploitation of this issue may allow an attacker to elevate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.