CVE-2023-4385: Kernel: jfs: null pointer dereference in dbfree()
A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfsdmap.c in journaling file system (JFS) in the Linux Kernel. In this flaw, a local attacker may crash the system due to a missing sanity check.
In our fault-injection testing, the variable "nblocks" in dbFree() can be zero when kmallocarray() fails in dtSearch(). In this case, the variable "mp" in dbFree() would be NULL and then it is dereferenced in "writemetapage(mp)".
References: https://github.com/torvalds/linux/commit/0d4837fdb796f99369cf7691d33de1b856bcaf1f
Other sources
A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfsdmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/Kernelto a version that resolves this vulnerability.Fixed in 5.19 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4385?
CVE-2023-4385 is classified as a high-severity vulnerability due to its potential to crash the system.
How do I fix CVE-2023-4385?
To fix CVE-2023-4385, update the Linux kernel to version 5.19 or later.
What software is affected by CVE-2023-4385?
CVE-2023-4385 affects multiple versions of the Linux kernel, specifically versions up to 5.18.19 and certain specified versions in the 5.10 and 6.1 series.
Who can exploit CVE-2023-4385?
CVE-2023-4385 can be exploited by a local attacker who can trigger a NULL pointer dereference.
What does CVE-2023-4385 exploit in the Linux kernel?
CVE-2023-4385 exploits a NULL pointer dereference in the dbFree function of the journaling file system (JFS) in the Linux kernel.