CVE-2023-52583

low-risk
Published 2024-03-06

In the Linux kernel, the following vulnerability has been resolved: ceph: fix deadlock or deadcode of misusing dget() The lock order is incorrect between denty and its parent, we should always make sure that the parent get the lock first. But since this deadcode is never used and the parent dir will always be set from the callers, let's just remove it.

Do I need to act?

-
0.01% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
5
CVSS 5.5/10 Medium
LOCAL / LOW complexity

Affected Products (2)

Affected Vendors

Debian Linux

References (18)

Patch https://git.kernel.org/stable/c/196b87e5c00ce021e164a5de0f0d04f4116a9160
Patch https://git.kernel.org/stable/c/6ab4fd508fad942f1f1ba940492f2735e078e980
Patch https://git.kernel.org/stable/c/76cb2aa3421fee4fde706dec41b1344bc0a9ad67
Patch https://git.kernel.org/stable/c/7f2649c94264d00df6b6ac27161e9f4372a3450e
Patch https://git.kernel.org/stable/c/a9c15d6e8aee074fae66c04d114f20b84274fcca
Patch https://git.kernel.org/stable/c/b493ad718b1f0357394d2cdecbf00a44a36fa085
Patch https://git.kernel.org/stable/c/e016e358461b89b231626fcf78c5c38e35c44fd3
Patch https://git.kernel.org/stable/c/eb55ba8aa7fb7aad54f40fbf4d8dcdfdba0bebf6
Patch https://git.kernel.org/stable/c/196b87e5c00ce021e164a5de0f0d04f4116a9160
Patch https://git.kernel.org/stable/c/6ab4fd508fad942f1f1ba940492f2735e078e980
Patch https://git.kernel.org/stable/c/76cb2aa3421fee4fde706dec41b1344bc0a9ad67
Patch https://git.kernel.org/stable/c/7f2649c94264d00df6b6ac27161e9f4372a3450e
Patch https://git.kernel.org/stable/c/a9c15d6e8aee074fae66c04d114f20b84274fcca
Patch https://git.kernel.org/stable/c/b493ad718b1f0357394d2cdecbf00a44a36fa085
Patch https://git.kernel.org/stable/c/e016e358461b89b231626fcf78c5c38e35c44fd3
Patch https://git.kernel.org/stable/c/eb55ba8aa7fb7aad54f40fbf4d8dcdfdba0bebf6
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html
Mailing List https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html
25
/ 100
low-risk
Severity 18/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 7/34 · Low