High 7.8Published Dec 30, 2025

CVE-2023-54187f2fs: fix potential corruption when moving a directory

Updated under an hour ago (Oct 28, 2026, 12:40 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix potential corruption when moving a directory F2FS has the same issue in ext4_rename causing crash revealed by xfstests/generic/707. See also commit 0813299c586b ("ext4: Fix possible corruption when moving a directory")

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: Aug 5, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce builds before 3e77036246123ff710fa2661dcaa12a45284f09b; from 622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce before 957904f531fd857a92743b11fbc9c9ffdf7f3207; 622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce builds before 8f57f3e112cf1d16682b6ff9c31c72f40f7da9c9; 622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce builds before 8a0b544b7caedfbc05065b6377fd1d8bf7ef5e70; from 622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce before f20191100952013f0916418cdaed0ab55c7b634c; 622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce builds before 0a76082a4a32a90d1ef33dee8b400efc082b4b6f; from 622f28ae9ba4fa89b4ff0f4a6cf75d153ea838ce before d94772154e524b329a168678836745d2773a6e02	CNA record

References

References

https://git.kernel.org/stable/c/3e77036246123ff710fa2661dcaa12a45284f09b
https://git.kernel.org/stable/c/957904f531fd857a92743b11fbc9c9ffdf7f3207
https://git.kernel.org/stable/c/8f57f3e112cf1d16682b6ff9c31c72f40f7da9c9
https://git.kernel.org/stable/c/8a0b544b7caedfbc05065b6377fd1d8bf7ef5e70
https://git.kernel.org/stable/c/f20191100952013f0916418cdaed0ab55c7b634c
https://git.kernel.org/stable/c/0a76082a4a32a90d1ef33dee8b400efc082b4b6f
https://git.kernel.org/stable/c/d94772154e524b329a168678836745d2773a6e02

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.