What is CVE-2023-52588?

CVE-2023-52588 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10, affecting Linux kernel versions from 3.8 onward and patched in 5.15.149, 6.1.77, 6.6.16 and others. CVE-2023-52588 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2023-52588?

CVE-2023-52588 has a CVSS score of 7.1 out of 10, rated High severity. The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.

Is there a patch available for CVE-2023-52588?

Yes, CVE-2023-52588 has been patched. Fixed versions include 5.15.149, 6.1.77, 6.6.16 and others. If you are running Linux kernel 3.8 or later up to the fix versions, apply the relevant patch for your kernel branch.

Is CVE-2023-52588 actively exploited?

CVE-2023-52588 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2023-52588

High

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gcing flag on page during block migration It needs to add missing gcing flag on page during block migration, in order to garantee migrated data be persisted during checkpoint, otherwise out-of-order persistency between data and node may cause data corruption after SPOR. Similar issue was fixed by commit 2d1fe8a86bf5 ("f2fs: fix to tag gcing flag on page during file defragment").

Package Linux Kernel

Published 2024-03-06

Last modified 2025-02-14

CVSS version 3.1

Patch available

Yes

CVSS 3.1 score

7.1

out of 10

High

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

High

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected versions

Linux kernel versions 3.8 and later are affected. Fixed in 5.15.149, 6.1.77, 6.6.16, 6.7.4, 6.8 and their respective stable series.

Affected from

≥ 3.8

Fixed in

✓ 5.15.149 5.15.x ✓ 6.1.77 6.1.x ✓ 6.6.16 6.6.x ✓ 6.7.4 6.7.x ✓ 6.8

References

5 total

Kernel Git
https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde

Mailing List Patch
Kernel Git
https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b

Mailing List Patch
Kernel Git
https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c

Mailing List Patch
Kernel Git
https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136

Mailing List Patch
Kernel Git
https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3

Mailing List Patch

Details

CVE ID CVE-2023-52588

Severity High

CVSS score 7.1 / 10

CVSS version 3.1

Published 2024-03-06

Modified 2025-02-14

KEV No

Patch

Yes

Package linux

Frequently asked questions

What is CVE-2023-52588?

CVE-2023-52588 is a High severity Linux kernel vulnerability with a CVSS score of 7.1 out of 10 . It affects Linux kernel versions from 3.8 onward and has been patched in 5.15.149, 6.1.77, 6.6.16 and others. CVE-2023-52588 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
What is the CVSS score for CVE-2023-52588?

CVE-2023-52588 has a CVSS score of 7.1 out of 10, rated High severity (CVSS 3.1). The vector string is CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H.
Is there a patch available for CVE-2023-52588?

Yes. CVE-2023-52588 has been patched. Fixed versions include 5.15.149, 6.1.77, 6.6.16 and others. If you are running Linux kernel 3.8 or later up to the fix versions, apply the relevant patch for your kernel branch.
Is CVE-2023-52588 actively exploited?

No. CVE-2023-52588 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.