High 7.8Published Oct 7, 2025

CVE-2023-53626ext4: fix possible double unlock when moving a directory

Updated under an hour ago (Oct 27, 2026, 8:00 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ext4: fix possible double unlock when moving a directory

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 8dac5a63cf79707b547ea3d425fead5f4482198f before c16cbd8233d6c58fc488545393e49b5d55729990; from 0c440f14558bfacd22c6935ae1fd4b2a09e96b5d before 020166bc6669ca9fb267ebd96bd88c4fb64a5d46; from c50fc503ee1b97f12c98e26afc39fdaebebcf04f before 1c93c42c7bb23057bde8a0a2ab834927ff64d20c; from b0bb13612292ca90fa4c2a7e425375649bc50d3e before e71eb4dca41f0f36823724ced0406bb2dbdd5506; 291cd19d107e197306869cb3237c1bba62d13182 builds before 43ce288ab5d7274a4a141d7f5e3ed2ab7b41f8a2; 0813299c586b175d7edb25f56412c54b812d0379 builds before 70e42feab2e20618ddd0cbfc4ab4b08628236ecd	CNA record
linux linux_kernel linux:linux_kernel	5.4.237; 5.10.175; 5.15.103; 6.1.20; 6.2.7; 6.3; 6.3	NVD

References

References

https://git.kernel.org/stable/c/c16cbd8233d6c58fc488545393e49b5d55729990	patch
https://git.kernel.org/stable/c/020166bc6669ca9fb267ebd96bd88c4fb64a5d46	patch
https://git.kernel.org/stable/c/1c93c42c7bb23057bde8a0a2ab834927ff64d20c	patch
https://git.kernel.org/stable/c/e71eb4dca41f0f36823724ced0406bb2dbdd5506	patch
https://git.kernel.org/stable/c/43ce288ab5d7274a4a141d7f5e3ed2ab7b41f8a2	patch
https://git.kernel.org/stable/c/70e42feab2e20618ddd0cbfc4ab4b08628236ecd	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.