Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52600

jfs: fix uaf in jfs_evict_inode

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls jfs_free_node(). Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 81b4249ef37297fb17ba102a524039a05c6c5d35affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5faffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < bc6ef64dbe71136f327d63b2b9071b828af2c2a8affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8e44dc3f96e903815dab1d74fff8faafdc6feb61affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 32e8f2d95528d45828c613417cb2827d866cbdceaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1696d6d7d4a1b373e96428d0fe1166bd7c3c795eaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < bacdaa04251382d7efd4f09f9a0686bfcc297e2eaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < e0e1958f4c365e380b17ccb35617345b31ef7bf3affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 4.19.307 to ≤ 4.19.*unaffected
  • 5.4.269 to ≤ 5.4.*unaffected
  • 5.10.210 to ≤ 5.10.*unaffected
  • 5.15.149 to ≤ 5.15.*unaffected
  • 6.1.77 to ≤ 6.1.*unaffected
  • 6.6.16 to ≤ 6.6.*unaffected
  • 6.7.4 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References