Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52436

f2fs: explicitly null-terminate the xattr list

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < 16ae3132ff7746894894927c1892493693b89135affected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < 12cf91e23b126718a96b914f949f2cdfeadc7b2aaffected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < 3e47740091b05ac8d7836a33afd8646b6863ca52affected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < 32a6cfc67675ee96fe107aeed5af9776fec63f11affected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < 5de9e9dd1828db9b8b962f7ca42548bd596deb8aaffected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < 2525d1ba225b5c167162fa344013c408e8b4de36affected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < f6c30bfe5a49bc38cae985083a11016800708feaaffected
  • af48b85b8cd3fbb12c9b6759c16db6d69c0b03da to < e26b6d39270f5eab0087453d9b544189a38c8564affected

Linux Linux

Default version status: affected

  • 3.8affected
  • 0 to < 3.8unaffected
  • 4.19.306 to ≤ 4.19.*unaffected
  • 5.4.268 to ≤ 5.4.*unaffected
  • 5.10.209 to ≤ 5.10.*unaffected
  • 5.15.148 to ≤ 5.15.*unaffected
  • 6.1.74 to ≤ 6.1.*unaffected
  • 6.6.13 to ≤ 6.6.*unaffected
  • 6.7.1 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References