High · 7.8 CVE-2023-52444 EUVD-2023-57069GHSA-6f72-79f8-3qcp

f2fs: fix to avoid dirent corruption

Published Feb 22, 2024 · Updated Oct 15, 2026 · Assigned by Linux

Vendor: Linux Product: Linux Package: linux Package: linux Package: linux-allwinner-5.19 Package: linux-aws Package: linux-aws-5.0 Package: linux-aws-5.11 Package: linux-aws-5.13 Package: linux-aws-5.15 Package: linux-aws-5.19 Package: linux-aws-5.3 Package: linux-aws-5.4 Package: linux-aws-5.8 Package: linux-aws-6.2 Package: linux-aws-6.5 Package: linux-aws-fips Package: linux-aws-hwe Package: linux-azure Package: linux-azure-4.15 Package: linux-azure-5.11 Package: linux-azure-5.13 Package: linux-azure-5.15 Package: linux-azure-5.19 Package: linux-azure-5.3 Package: linux-azure-5.4 Package: linux-azure-5.8 Package: linux-azure-6.2 Package: linux-azure-6.5 Package: linux-azure-edge Package: linux-azure-fde Package: linux-azure-fde-5.19 Package: linux-azure-fde-6.2 Package: linux-azure-fips Package: linux-bluefield Package: linux-fips Package: linux-gcp Package: linux-gcp-4.15 Package: linux-gcp-5.11 Package: linux-gcp-5.13 Package: linux-gcp-5.15 Package: linux-gcp-5.19 Package: linux-gcp-5.3 Package: linux-gcp-5.4 Package: linux-gcp-5.8 Package: linux-gcp-6.2 Package: linux-gcp-6.5 Package: linux-gcp-fips Package: linux-gke Package: linux-gke-4.15 Package: linux-gke-5.15 Package: linux-gke-5.4 Package: linux-gkeop Package: linux-gkeop-5.15 Package: linux-gkeop-5.4 Package: linux-hwe Package: linux-hwe-5.11 Package: linux-hwe-5.13 Package: linux-hwe-5.15 Package: linux-hwe-5.19 Package: linux-hwe-5.4 Package: linux-hwe-5.8 Package: linux-hwe-6.2 Package: linux-hwe-6.5 Package: linux-hwe-edge Package: linux-ibm Package: linux-ibm-5.15 Package: linux-ibm-5.4 Package: linux-intel-5.13 Package: linux-intel-iot-realtime Package: linux-intel-iotg Package: linux-intel-iotg-5.15 Package: linux-iot Package: linux-kvm Package: linux-lowlatency Package: linux-lowlatency-hwe-5.15 Package: linux-lowlatency-hwe-5.19 Package: linux-lowlatency-hwe-6.2 Package: linux-lowlatency-hwe-6.5 Package: linux-lts-xenial Package: linux-nvidia Package: linux-nvidia-6.2 Package: linux-nvidia-6.5 Package: linux-nvidia-tegra Package: linux-nvidia-tegra-5.15 Package: linux-nvidia-tegra-igx Package: linux-oem Package: linux-oem-5.10 Package: linux-oem-5.13 Package: linux-oem-5.14 Package: linux-oem-5.17 Package: linux-oem-5.6 Package: linux-oem-6.0 Package: linux-oem-6.1 Package: linux-oem-6.5 Package: linux-oracle Package: linux-oracle-5.0 Package: linux-oracle-5.11 Package: linux-oracle-5.13 Package: linux-oracle-5.15 Package: linux-oracle-5.3 Package: linux-oracle-5.4 Package: linux-oracle-5.8 Package: linux-oracle-6.5 Package: linux-raspi Package: linux-raspi-5.4 Package: linux-raspi-realtime Package: linux-raspi2 Package: linux-realtime Package: linux-riscv Package: linux-riscv-5.11 Package: linux-riscv-5.15 Package: linux-riscv-5.19 Package: linux-riscv-5.8 Package: linux-riscv-6.5 Package: linux-starfive-5.19 Package: linux-starfive-6.2 Package: linux-starfive-6.5 Package: linux-vmware Package: linux-xilinx-zynqmp Platform: Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: fix to avoid dirent corruption

As Al reported in link[1]:

f2fs_rename()
...
if (old_dir != new_dir && !whiteout)
f2fs_set_link(old_inode, old_dir_entry,
old_dir_page, new_dir);
else
f2fs_put_page(old_dir_page, 0);

You want correct inumber in the ".." link. And cross-directory
rename does move the source to new parent, even if you'd been asked
to leave a whiteout in the old place.

[1] https://lore.kernel.org/all/20231017055040.GN800259@ZenIV/

With below testcase, it may cause dirent corruption, due to it missed
to call f2fs_set_link() to update ".." link to new directory.
- mkdir -p dir/foo
- renameat2 -w dir/foo bar

[ASSERT] (__chk_dots_dentries:1421) --> Bad inode number[0x4] for '..', parent parent ino is [0x3]
[FSCK] other corrupted bugs [Fail]

Affected products

Vendor	Product	Affected	Fixed
Linux	Linux	4.2	4.19.306

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	linux	6.6.15-1	—
Debian 13	linux	6.6.15-1	—
Debian 12	linux	6.1.76-1	—
Debian 10	linux	4.19.316-1	DLA-3840-1
Debian 10	linux-5.10	5.10.209-2~deb10u1	DLA-3841-1

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu Nvidia-BlueField 22.04 LTS	linux-bluefield	5.15.0-1040.42	—
Ubuntu 22.04 LTS	linux +1	5.15.0-102.112	USN-6725-1
Ubuntu 22.04 LTS	linux-aws	5.15.0-1057.63	USN-6725-2
Ubuntu 22.04 LTS	linux-azure	5.15.0-1060.69	USN-6725-1
Ubuntu 22.04 LTS	linux-azure-6.5	6.5.0-1022.23~22.04.1	USN-6819-1
Ubuntu 22.04 LTS	linux-azure-fde	5.15.0-1060.69.1	USN-6725-1
Ubuntu 22.04 LTS	linux-gcp	5.15.0-1055.63	USN-6725-1
Ubuntu 22.04 LTS	linux-gcp-6.5	6.5.0-1022.24~22.04.1	USN-6818-1
Ubuntu 22.04 LTS	linux-gke +1	5.15.0-1054.59	USN-6725-1
Ubuntu 22.04 LTS	linux-gkeop	5.15.0-1040.46	USN-6725-1
Ubuntu 22.04 LTS	linux-hwe-6.5	6.5.0-41.41~22.04.2	USN-6818-4
Ubuntu 22.04 LTS	linux-ibm +1	5.15.0-1050.53	USN-6725-1
Ubuntu 22.04 LTS	linux-intel-iotg	5.15.0-1052.58	USN-6725-1
Ubuntu 22.04 LTS	linux-lowlatency-hwe-6.5	6.5.0-41.41.1~22.04.1	USN-6818-1
Ubuntu 22.04 LTS	linux-nvidia	5.15.0-1048.48	USN-6725-1
Ubuntu 22.04 LTS	linux-nvidia-6.5	6.5.0-1021.22	USN-6818-3
Ubuntu 22.04 LTS	linux-nvidia-tegra	5.15.0-1025.25	—
Ubuntu 22.04 LTS	linux-nvidia-tegra-igx	5.15.0-1012.12	—
Ubuntu 22.04 LTS	linux-oem-6.1	6.1.0-1035.35	USN-6688-1
Ubuntu 22.04 LTS	linux-oem-6.5	6.5.0-1024.25	USN-6819-3
Ubuntu 22.04 LTS	linux-oracle	5.15.0-1055.61	USN-6725-1
Ubuntu 22.04 LTS	linux-oracle-6.5	6.5.0-1024.24~22.04.1	USN-6819-4
Ubuntu 22.04 LTS	linux-riscv +21	No fix yet	—
Ubuntu 22.04 LTS	linux-riscv-6.5	6.5.0-40.40.1~22.04.1	—
Ubuntu 22.04 LTS	linux-starfive-6.5	6.5.0-1015.16~22.04.1	USN-6819-1
Ubuntu 22.04 LTS	linux-xilinx-zynqmp	5.15.0-1030.34	—
Ubuntu 20.04 LTS	linux	5.4.0-176.196	USN-6726-1
Ubuntu 20.04 LTS	linux-aws	5.4.0-1122.132	USN-6726-1
Ubuntu 20.04 LTS	linux-aws-5.15	5.15.0-1057.63~20.04.1	USN-6725-2
Ubuntu 20.04 LTS	linux-azure	5.4.0-1127.134	USN-6726-1
Ubuntu 20.04 LTS	linux-azure-5.15	5.15.0-1060.69~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-azure-fde-5.15	5.15.0-1060.69~20.04.1.1	USN-6725-1
Ubuntu 20.04 LTS	linux-bluefield	5.4.0-1082.89	USN-6726-1
Ubuntu 20.04 LTS	linux-gcp	5.4.0-1126.135	USN-6726-1
Ubuntu 20.04 LTS	linux-gcp-5.15	5.15.0-1055.63~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-gke +26	No fix yet	—
Ubuntu 20.04 LTS	linux-gkeop	5.4.0-1089.93	USN-6726-1
Ubuntu 20.04 LTS	linux-gkeop-5.15	5.15.0-1040.46~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-hwe-5.15 +1	5.15.0-102.112~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-ibm	5.4.0-1069.74	USN-6726-1
Ubuntu 20.04 LTS	linux-ibm-5.15	5.15.0-1050.53~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-intel-iotg-5.15	5.15.0-1052.58~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-iot	5.4.0-1034.35	USN-6726-2
Ubuntu 20.04 LTS	linux-kvm	5.4.0-1110.117	USN-6726-1
Ubuntu 20.04 LTS	linux-nvidia-tegra-5.15	5.15.0-1025.25~20.04.1	—
Ubuntu 20.04 LTS	linux-oracle	5.4.0-1121.130	USN-6726-1
Ubuntu 20.04 LTS	linux-oracle-5.15	5.15.0-1055.61~20.04.1	USN-6725-1
Ubuntu 20.04 LTS	linux-raspi	5.4.0-1106.118	USN-6726-1
Ubuntu 20.04 LTS	linux-riscv-5.15	5.15.0-1053.57~20.04.1	—
Ubuntu 20.04 LTS	linux-xilinx-zynqmp	5.4.0-1041.45	USN-6726-3
Ubuntu 18.04 LTS	linux-gcp +14	No fix yet	—
Ubuntu 16.04 LTS	linux-hwe-edge	No fix yet	—

Show 13 more (older releases, extended support, other products)

Release	Package	Fixed in	Advisory
Ubuntu Pro Realtime 24.04 LTS	linux-raspi-realtime	6.8.0-2001.1	—
Ubuntu Pro Realtime 22.04 LTS	linux-intel-iot-realtime	5.15.0-1050.52	—
Ubuntu Pro Realtime 22.04 LTS	linux-realtime	5.15.0-1058.66	—
Ubuntu Pro FIPS 20.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS 18.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro FIPS 16.04 LTS	linux-fips	No fix yet	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-aws-fips	5.15.0-1057.63+fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-azure-fips	5.15.0-1060.69+fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-fips	5.15.0-102.112+fips1	—
Ubuntu Pro FIPS-updates 22.04 LTS	linux-gcp-fips	5.15.0-1055.63+fips2	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-aws-fips	5.4.0-1122.132+fips1	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-azure-fips	5.4.0-1127.134+fips1	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-fips	5.4.0-1096.106	—
Ubuntu Pro FIPS-updates 20.04 LTS	linux-gcp-fips	5.4.0-1126.135+fips1	—
Ubuntu Pro FIPS-updates 18.04 LTS	linux-aws-fips	4.15.0-2109.115	—
Ubuntu Pro FIPS-updates 18.04 LTS	linux-azure-fips	4.15.0-2088.94	—
Ubuntu Pro FIPS-updates 18.04 LTS	linux-fips	4.15.0-1125.136	—
Ubuntu Pro FIPS-updates 18.04 LTS	linux-gcp-fips	4.15.0-2072.77	—
Ubuntu Pro FIPS-updates 16.04 LTS	linux-fips	4.4.0-1103.110	—
Ubuntu Pro FIPS-preview 22.04 LTS	linux-fips +3	No fix yet	—
Ubuntu Pro 18.04 LTS	linux	4.15.0-227.239	USN-6926-1
Ubuntu Pro 18.04 LTS	linux-aws	4.15.0-1170.183	USN-6926-1
Ubuntu Pro 18.04 LTS	linux-aws-5.4	5.4.0-1122.132~18.04.1	USN-6726-1
Ubuntu Pro 18.04 LTS	linux-azure-4.15	4.15.0-1179.194	USN-6926-2
Ubuntu Pro 18.04 LTS	linux-azure-5.4	5.4.0-1127.134~18.04.1	USN-6726-1
Ubuntu Pro 18.04 LTS	linux-gcp-4.15	4.15.0-1164.181	USN-6926-1
Ubuntu Pro 18.04 LTS	linux-gcp-5.4	5.4.0-1126.135~18.04.1	USN-6726-1
Ubuntu Pro 18.04 LTS	linux-hwe-5.4	5.4.0-175.195~18.04.1	USN-6726-1
Ubuntu Pro 18.04 LTS	linux-ibm-5.4	5.4.0-1069.74~18.04.1	USN-6726-1
Ubuntu Pro 18.04 LTS	linux-kvm	4.15.0-1154.159	USN-6926-1
Ubuntu Pro 18.04 LTS	linux-oracle	4.15.0-1133.144	USN-6926-1
Ubuntu Pro 18.04 LTS	linux-oracle-5.4	5.4.0-1121.130~18.04.1	USN-6726-1
Ubuntu Pro 18.04 LTS	linux-raspi-5.4	5.4.0-1106.118~18.04.1	USN-6726-1
Ubuntu Pro 16.04 LTS	linux	4.4.0-257.291	USN-6938-1
Ubuntu Pro 16.04 LTS	linux-aws	4.4.0-1172.187	USN-6938-1
Ubuntu Pro 16.04 LTS	linux-aws-hwe	4.15.0-1170.183~16.04.1	USN-6926-1
Ubuntu Pro 16.04 LTS	linux-azure	4.15.0-1179.194~16.04.1	USN-6926-3
Ubuntu Pro 16.04 LTS	linux-gcp	4.15.0-1164.181~16.04.1	USN-6926-1
Ubuntu Pro 16.04 LTS	linux-hwe	4.15.0-227.239~16.04.1	USN-6926-1
Ubuntu Pro 16.04 LTS	linux-kvm	4.4.0-1135.145	USN-6938-1
Ubuntu Pro 16.04 LTS	linux-oracle	4.15.0-1133.144~16.04.1	USN-6926-1
Ubuntu Pro 14.04 LTS	linux-aws	4.4.0-1134.140	USN-6938-1
Ubuntu Pro 14.04 LTS	linux-azure	4.15.0-1179.194~14.04.1	USN-6926-2
Ubuntu Pro 14.04 LTS	linux-lts-xenial	4.4.0-257.291~14.04.1	USN-6938-1

Advisories 21

USN-6819-4 linux-oracle-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6818-3 linux-nvidia-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6818-1 linux, linux-gcp, linux-gcp-6.5, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6819-3 linux-oem-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6818-4 linux-hwe-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6819-1 linux-azure, linux-azure-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6725-1 linux, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gcp-5.15, linux-gke, linux-gkeop, linux-gkeop-5.15, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-oracle, linux-oracle-5.15, linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6725-2 linux-aws, linux-aws-5.15 vulnerabilities Ubuntu Security Notices (USN) · Nov 3, 2026
USN-6926-3 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6938-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6926-1 linux, linux-aws, linux-aws-hwe, linux-gcp, linux-gcp-4.15, linux-hwe, linux-kvm, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6926-2 linux-azure, linux-azure-4.15 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
USN-6726-2 linux-iot vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
USN-6726-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
USN-6726-3 linux-xilinx-zynqmp vulnerabilities Ubuntu Security Notices (USN) · Oct 23, 2026
USN-6688-1 linux-oem-6.1 vulnerabilities Ubuntu Security Notices (USN) · Oct 22, 2026
SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
DLA-3841-1 linux-5.10 - security update Debian Security (DSA / DLA) · Mar 9, 2026
DLA-3840-1 linux - security update Debian Security (DSA / DLA) · Mar 9, 2026
WID-SEC-2024-0473 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 16, 2026
ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025

References