IT

Tracker / CVE-2023-52799

CVE-2023-52799

High 7.8

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtree_t for sufficient free blocks there is an array out of bounds while getting element in tp->dm_stree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied.

Affected products and versions

linux linux_kernel · … → 4.14.331
linux linux_kernel · 4.15 → 4.19.300
linux linux_kernel · 4.20 → 5.4.262
linux linux_kernel · 5.11 → 5.15.140
linux linux_kernel · 5.16 → 6.1.64
linux linux_kernel · 5.5 → 5.10.202
linux linux_kernel · 6.2 → 6.5.13
linux linux_kernel · 6.6 → 6.6.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References