Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-52810

fs/jfs: Add check for negative db_l2nbperpage

Description

In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(number of blks per page), and the minimum legal value should be 0, not negative. In the case of l2nbperpage being negative, an error will occur when subsequently used as shift exponent. Syzbot reported this bug: UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:799:12 shift exponent -16777216 is negative

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < cc61fcf7d1c99f148fe8ddfb5c6ed0bb75861f01affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 8f2964df6bfce9d92d81ca552010b8677af8d9dcaffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < a81a56b4cbe3142cc99f6b98e8f9b3a631c768e1affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 524b4f203afcf87accfe387e846f33f916f0c907affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5f148b16972e5f4592629b244d5109b15135f53faffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 0cb567e727339a192f9fd0db00781d73a91d15a6affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 491085258185ffc4fb91555b0dba895fe7656a45affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 1a7c53fdea1d189087544d9a606d249e93c4934baffected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 525b861a008143048535011f3816d407940f4bfaaffected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 4.14.331 to ≤ 4.14.*unaffected
  • 4.19.300 to ≤ 4.19.*unaffected
  • 5.4.262 to ≤ 5.4.*unaffected
  • 5.10.202 to ≤ 5.10.*unaffected
  • 5.15.140 to ≤ 5.15.*unaffected
  • 6.1.64 to ≤ 6.1.*unaffected
  • 6.5.13 to ≤ 6.5.*unaffected
  • 6.6.3 to ≤ 6.6.*unaffected
  • 6.7 to ≤ *unaffected

References