Improper locking in Linux kernel ext4



| Updated: 2025-05-10
Risk Low
Patch available YES
Number of vulnerabilities 1
CVE-ID CVE-2023-53129
CWE-ID CWE-667
Exploitation vector Local
Public exploit N/A
Vulnerable software
 Linux kernel
Operating systems & Components / Operating system

Vendor Linux Foundation

Security Bulletin

This security bulletin contains one low risk vulnerability.

1) Improper locking

EUVDB-ID: #VU108481

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-53129

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the ext4_rename() and ext4_journal_stop() functions in fs/ext4/namei.c. A local user can perform a denial of service (DoS) attack.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: 5.10 - 5.10.174

CPE2.3 External links

https://git.kernel.org/stable/c/2ef7f829214fa8f428d953b49557b89b2b02db66
https://git.kernel.org/stable/c/352c728653a1179ce7bb37a4c8aa8404d83914a2
https://git.kernel.org/stable/c/3c92792da8506a295afb6d032b4476e46f979725
https://git.kernel.org/stable/c/6b06c4ae64e3557a19b3bb0b6dbf641bc41fc218
https://git.kernel.org/stable/c/a2bc806e95bde8de3a0d675051d9ae78dcf6c691
https://git.kernel.org/stable/c/b113f90204479f55a17295bedf0cc966a60c7a56
https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.175


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###