CVE-2023-52600
jfs: fix uaf in jfs_evict_inode
Description
In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls jfs_free_node(). Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.
INFO
Published Date :
March 6, 2024, 7:15 a.m.
Last Modified :
Dec. 12, 2024, 5:36 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS Scores
| Score | Version | Severity | Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|---|
| CVSS 3.1 | HIGH | [email protected] |
Solution
- Update the Linux kernel packages to a patched version.
- Reboot the system after updating the kernel.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2023-52600.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2023-52600 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2023-52600
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2023-52600 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2023-52600 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Dec. 12, 2024
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE NIST CWE-416 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions up to (excluding) 4.19.307 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.20 up to (excluding) 5.4.269 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.210 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.149 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.77 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.16 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.7.4 Changed Reference Type https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e No Types Assigned https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e Patch Changed Reference Type https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e No Types Assigned https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e Patch Changed Reference Type https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce No Types Assigned https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce Patch Changed Reference Type https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce No Types Assigned https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce Patch Changed Reference Type https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 No Types Assigned https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 Patch Changed Reference Type https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 No Types Assigned https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 Patch Changed Reference Type https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 No Types Assigned https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 Patch Changed Reference Type https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 No Types Assigned https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 Patch Changed Reference Type https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f No Types Assigned https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f Patch Changed Reference Type https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f No Types Assigned https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f Patch Changed Reference Type https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e No Types Assigned https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e Patch Changed Reference Type https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e No Types Assigned https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e Patch Changed Reference Type https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 No Types Assigned https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 Patch Changed Reference Type https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 No Types Assigned https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 Patch Changed Reference Type https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3 No Types Assigned https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3 Patch Changed Reference Type https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3 No Types Assigned https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3 Patch Changed Reference Type https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html No Types Assigned https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Patch Changed Reference Type https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html No Types Assigned https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html Patch -
CVE Modified by af854a3a-2127-422b-91ae-364da2661108
Nov. 21, 2024
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e Added Reference https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce Added Reference https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 Added Reference https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 Added Reference https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f Added Reference https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e Added Reference https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 Added Reference https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3 Added Reference https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Added Reference https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Nov. 04, 2024
Action Type Old Value New Value Removed Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html Removed Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 27, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Jun. 25, 2024
Action Type Old Value New Value Added Reference kernel.org https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html [No types assigned] -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 29, 2024
Action Type Old Value New Value -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
May. 14, 2024
Action Type Old Value New Value -
CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Mar. 06, 2024
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls jfs_free_node(). Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap. Added Reference Linux https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e [No types assigned] Added Reference Linux https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3 [No types assigned]