imPC@ndo IT

Tracker / CVE-2023-52436

CVE-2023-52436

High 7.8

In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

Affected products and versions

linux linux_kernel · … → 4.19.306
linux linux_kernel · 4.20.0 → 5.4.268
linux linux_kernel · 5.11.0 → 5.15.148
linux linux_kernel · 5.16.0 → 6.1.74
linux linux_kernel · 5.5.0 → 5.10.209
linux linux_kernel · 6.2.0 → 6.6.13
linux linux_kernel · 6.7.0 → 6.7.1

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References