CVE-2023-52583
ceph: fix deadlock or deadcode of misusing dget()
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
06 Mar 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
In the Linux kernel, the following vulnerability has been resolved:
ceph: fix deadlock or deadcode of misusing dget()
The lock order is incorrect between denty and its parent, we should
always make sure that the parent get the lock first.
But since this deadcode is never used and the parent dir will always
be set from the callers, let's just remove it.
Affected products
Linux · LinuxReferences
https://git.kernel.org/stable/c/196b87e5c00ce021e164a5de0f0d04f4116a9160https://git.kernel.org/stable/c/6ab4fd508fad942f1f1ba940492f2735e078e980https://git.kernel.org/stable/c/76cb2aa3421fee4fde706dec41b1344bc0a9ad67https://git.kernel.org/stable/c/7f2649c94264d00df6b6ac27161e9f4372a3450ehttps://git.kernel.org/stable/c/a9c15d6e8aee074fae66c04d114f20b84274fccahttps://git.kernel.org/stable/c/b493ad718b1f0357394d2cdecbf00a44a36fa085https://git.kernel.org/stable/c/e016e358461b89b231626fcf78c5c38e35c44fd3https://git.kernel.org/stable/c/eb55ba8aa7fb7aad54f40fbf4d8dcdfdba0bebf6https://lists.debian.org/debian-lts-announce/2024/06/msg00017.htmlhttps://lists.debian.org/debian-lts-announce/2024/06/msg00020.html