CVE-2023-52602
jfs: fix slab-out-of-bounds Read in dtSearch
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds Read in dtSearch Currently while searching for current page in the sorted entry table of the page there is a out of bound access. Added a bound check to fix the error. Dave: Set return code to -EIO
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
2.6.12
References 8
git.kernel.org
- stable/c/ce8bc22e948634a5c0a3fa58a179177d0e3f3950
- stable/c/1b9d6828589d57f94a23fb1c46112cda39d7efdb
- stable/c/1c40ca3d39d769931b28295b3145c25f1decf5a6
- stable/c/6c6a96c3d74df185ee344977d46944d6f33bb4dd
- stable/c/cab0c265ba182fd266c2aa3c69d7e40640a7f612
- stable/c/7110650b85dd2f1cee819acd1345a9013a1a62f7
- stable/c/bff9d4078a232c01e42e9377d005fb2f4d31a472
- stable/c/fa5492ee89463a7590a1449358002ff7ef63529f