CVE-2023-52436: f2fs: explicitly null-terminate the xattr list

Published Feb 20, 2024
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

f2fs: explicitly null-terminate the xattr list

When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

Affected Software

178 affected componentsFixes available
Linux Linux kernel<4.19.306
Linux Linux kernel>=4.20.0<5.4.268
Linux Linux kernel>=5.5.0<5.10.209
Linux Linux kernel>=5.11.0<5.15.148
Linux Linux kernel>=5.16.0<6.1.74
Linux Linux kernel>=6.2.0<6.6.13
Linux Linux kernel>=6.7.0<6.7.1
debian/linux
5.10.223-15.10.234-16.1.129-16.1.135-16.12.25-1
ubuntu/linux-aws<4.4.0-1134.140
4.4.0-1134.140
ubuntu/linux-azure<4.15.0-1179.194~14.04.1
4.15.0-1179.194~14.04.1
ubuntu/linux-lts-xenial<4.4.0-257.291~14.04.1
4.4.0-257.291~14.04.1
ubuntu/linux*
ubuntu/linux<4.4.0-257.291
4.4.0-257.291
ubuntu/linux-aws<4.4.0-1172.187
4.4.0-1172.187
ubuntu/linux-aws-hwe<4.15.0-1170.183~16.04.1
4.15.0-1170.183~16.04.1
ubuntu/linux-azure<4.15.0-1179.194~16.04.1
4.15.0-1179.194~16.04.1
ubuntu/linux-gcp<4.15.0-1164.181~16.04.1
4.15.0-1164.181~16.04.1
ubuntu/linux-hwe<4.15.0-227.239~16.04.1
4.15.0-227.239~16.04.1
ubuntu/linux-kvm<4.4.0-1135.145
4.4.0-1135.145
ubuntu/linux-oracle<4.15.0-1133.144~16.04.1
4.15.0-1133.144~16.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-fips<4.4.0-1103.110
4.4.0-1103.110
ubuntu/linux-fips*
ubuntu/linux<4.15.0-227.239
4.15.0-227.239
ubuntu/linux-aws<4.15.0-1170.183
4.15.0-1170.183
ubuntu/linux-aws-5.0*
ubuntu/linux-aws-5.3*
ubuntu/linux-aws-5.4<5.4.0-1122.132~18.04.1
5.4.0-1122.132~18.04.1
ubuntu/linux-azure*
ubuntu/linux-azure-4.15<4.15.0-1179.194
4.15.0-1179.194
ubuntu/linux-azure-5.3*
ubuntu/linux-azure-5.4<5.4.0-1127.134~18.04.1
5.4.0-1127.134~18.04.1
ubuntu/linux-azure-edge*
ubuntu/linux-gcp*
ubuntu/linux-gcp-4.15<4.15.0-1164.181
4.15.0-1164.181
ubuntu/linux-gcp-5.3*
ubuntu/linux-gcp-5.4<5.4.0-1126.135~18.04.1
5.4.0-1126.135~18.04.1
ubuntu/linux-gke-4.15*
ubuntu/linux-gke-5.4*
ubuntu/linux-gkeop-5.4*
ubuntu/linux-hwe*
ubuntu/linux-hwe-5.4<5.4.0-175.195~18.04.1
5.4.0-175.195~18.04.1
ubuntu/linux-hwe-edge*
ubuntu/linux-ibm-5.4<5.4.0-1069.74~18.04.1
5.4.0-1069.74~18.04.1
ubuntu/linux-kvm<4.15.0-1154.159
4.15.0-1154.159
ubuntu/linux-oem*
ubuntu/linux-oracle<4.15.0-1133.144
4.15.0-1133.144
ubuntu/linux-oracle-5.0*
ubuntu/linux-oracle-5.3*
ubuntu/linux-oracle-5.4<5.4.0-1121.130~18.04.1
5.4.0-1121.130~18.04.1
ubuntu/linux-raspi-5.4<5.4.0-1106.118~18.04.1
5.4.0-1106.118~18.04.1
ubuntu/linux-aws-fips<4.15.0-2109.115
4.15.0-2109.115
ubuntu/linux-azure-fips<4.15.0-2088.94
4.15.0-2088.94
ubuntu/linux-fips<4.15.0-1125.136
4.15.0-1125.136
ubuntu/linux-gcp-fips<4.15.0-2072.77
4.15.0-2072.77
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.4.0-176.196
5.4.0-176.196
ubuntu/linux-aws<5.4.0-1122.132
5.4.0-1122.132
ubuntu/linux-aws-5.15<5.15.0-1057.63~20.04.1
5.15.0-1057.63~20.04.1
ubuntu/linux-azure<5.4.0-1127.134
5.4.0-1127.134
ubuntu/linux-azure-5.15<5.15.0-1060.69~20.04.1
5.15.0-1060.69~20.04.1
ubuntu/linux-bluefield<5.4.0-1082.89
5.4.0-1082.89
ubuntu/linux-gcp<5.4.0-1126.135
5.4.0-1126.135
ubuntu/linux-gcp-5.15<5.15.0-1055.63~20.04.1
5.15.0-1055.63~20.04.1
ubuntu/linux-gkeop<5.4.0-1089.93
5.4.0-1089.93
ubuntu/linux-gkeop-5.15<5.15.0-1040.46~20.04.1
5.15.0-1040.46~20.04.1
ubuntu/linux-hwe-5.15<5.15.0-102.112~20.04.1
5.15.0-102.112~20.04.1
ubuntu/linux-ibm<5.4.0-1069.74
5.4.0-1069.74
ubuntu/linux-ibm-5.15<5.15.0-1050.53~20.04.1
5.15.0-1050.53~20.04.1
ubuntu/linux-intel-iotg-5.15<5.15.0-1052.58~20.04.1
5.15.0-1052.58~20.04.1
ubuntu/linux-iot<5.4.0-1034.35
5.4.0-1034.35
ubuntu/linux-kvm<5.4.0-1110.117
5.4.0-1110.117
ubuntu/linux-lowlatency-hwe-5.15<5.15.0-102.112~20.04.1
5.15.0-102.112~20.04.1
ubuntu/linux-nvidia-tegra-5.15<5.15.0-1025.25~20.04.1
5.15.0-1025.25~20.04.1
ubuntu/linux-oracle<5.4.0-1121.130
5.4.0-1121.130
ubuntu/linux-oracle-5.15<5.15.0-1055.61~20.04.1
5.15.0-1055.61~20.04.1
ubuntu/linux-raspi<5.4.0-1106.118
5.4.0-1106.118
ubuntu/linux-riscv-5.15<5.15.0-1053.57~20.04.1
5.15.0-1053.57~20.04.1
ubuntu/linux-xilinx-zynqmp<5.4.0-1041.45
5.4.0-1041.45
ubuntu/linux-aws-5.11*
ubuntu/linux-aws-5.13*
ubuntu/linux-aws-5.8*
ubuntu/linux-azure-5.11*
ubuntu/linux-azure-5.13*
ubuntu/linux-azure-5.8*
ubuntu/linux-azure-fde*
ubuntu/linux-gcp-5.11*
ubuntu/linux-gcp-5.13*
ubuntu/linux-gcp-5.8*
ubuntu/linux-gke*
ubuntu/linux-gke-5.15*
ubuntu/linux-hwe-5.11*
ubuntu/linux-hwe-5.13*
ubuntu/linux-hwe-5.8*
ubuntu/linux-intel-5.13*
ubuntu/linux-oem-5.10*
ubuntu/linux-oem-5.13*
ubuntu/linux-oem-5.6*
ubuntu/linux-oracle-5.11*
ubuntu/linux-oracle-5.13*
ubuntu/linux-oracle-5.8*
ubuntu/linux-raspi2*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.11*
ubuntu/linux-riscv-5.8*
ubuntu/linux-aws-fips<5.4.0-1122.132+fips1
5.4.0-1122.132+fips1
ubuntu/linux-azure-fips<5.4.0-1127.134+fips1
5.4.0-1127.134+fips1
ubuntu/linux-fips<5.4.0-1096.106
5.4.0-1096.106
ubuntu/linux-gcp-fips<5.4.0-1126.135+fips1
5.4.0-1126.135+fips1
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux<5.15.0-102.112
5.15.0-102.112
ubuntu/linux-allwinner-5.19*
ubuntu/linux-aws<5.15.0-1057.63
5.15.0-1057.63
ubuntu/linux-aws-5.19*
ubuntu/linux-aws-6.2*
ubuntu/linux-aws-6.5<6.5.0-1017.17~22.04.2
6.5.0-1017.17~22.04.2
ubuntu/linux-azure<5.15.0-1060.69
5.15.0-1060.69
ubuntu/linux-azure-5.19*
ubuntu/linux-azure-6.2*
ubuntu/linux-azure-6.5<6.5.0-1018.19~22.04.2
6.5.0-1018.19~22.04.2
ubuntu/linux-azure-fde<5.15.0-1060.69.1
5.15.0-1060.69.1
ubuntu/linux-azure-fde-5.19*
ubuntu/linux-azure-fde-6.2*
ubuntu/linux-gcp<5.15.0-1055.63
5.15.0-1055.63
ubuntu/linux-gcp-5.19*
ubuntu/linux-gcp-6.2*
ubuntu/linux-gcp-6.5<6.5.0-1017.17~22.04.1
6.5.0-1017.17~22.04.1
ubuntu/linux-gke<5.15.0-1054.59
5.15.0-1054.59
ubuntu/linux-gkeop<5.15.0-1040.46
5.15.0-1040.46
ubuntu/linux-hwe-5.19*
ubuntu/linux-hwe-6.2*
ubuntu/linux-hwe-6.5<6.5.0-27.28~22.04.1
6.5.0-27.28~22.04.1
ubuntu/linux-ibm<5.15.0-1050.53
5.15.0-1050.53
ubuntu/linux-intel-iotg<5.15.0-1052.58
5.15.0-1052.58
ubuntu/linux-kvm<5.15.0-1054.59
5.15.0-1054.59
ubuntu/linux-lowlatency<5.15.0-102.112
5.15.0-102.112
ubuntu/linux-lowlatency-hwe-5.19*
ubuntu/linux-lowlatency-hwe-6.2*
ubuntu/linux-lowlatency-hwe-6.5<6.5.0-27.28.1~22.04.1
6.5.0-27.28.1~22.04.1
ubuntu/linux-nvidia<5.15.0-1048.48
5.15.0-1048.48
ubuntu/linux-nvidia-6.2*
ubuntu/linux-nvidia-6.5<6.5.0-1014.14
6.5.0-1014.14
ubuntu/linux-nvidia-tegra<5.15.0-1025.25
5.15.0-1025.25
ubuntu/linux-nvidia-tegra-igx<5.15.0-1012.12
5.15.0-1012.12
ubuntu/linux-oem-5.17*
ubuntu/linux-oem-6.0*
ubuntu/linux-oem-6.1<6.1.0-1035.35
6.1.0-1035.35
ubuntu/linux-oem-6.5<6.5.0-1019.20
6.5.0-1019.20
ubuntu/linux-oracle<5.15.0-1055.61
5.15.0-1055.61
ubuntu/linux-oracle-6.5<6.5.0-1020.20~22.04.1
6.5.0-1020.20~22.04.1
ubuntu/linux-raspi<5.15.0-1050.53
5.15.0-1050.53
ubuntu/linux-realtime*
ubuntu/linux-riscv*
ubuntu/linux-riscv-5.19*
ubuntu/linux-riscv-6.5<6.5.0-27.28.1~22.04.1
6.5.0-27.28.1~22.04.1
ubuntu/linux-starfive-5.19*
ubuntu/linux-starfive-6.2*
ubuntu/linux-starfive-6.5<6.5.0-1011.12~22.04.1
6.5.0-1011.12~22.04.1
ubuntu/linux-xilinx-zynqmp<5.15.0-1030.34
5.15.0-1030.34
ubuntu/linux-bluefield<5.15.0-1040.42
5.15.0-1040.42
ubuntu/linux-intel-iot-realtime<5.15.0-1050.52
5.15.0-1050.52
ubuntu/linux-realtime<5.15.0-1058.66
5.15.0-1058.66
ubuntu/linux-aws-fips*
ubuntu/linux-azure-fips*
ubuntu/linux-fips*
ubuntu/linux-gcp-fips*
ubuntu/linux-aws-fips<5.15.0-1057.63+fips1
5.15.0-1057.63+fips1
ubuntu/linux-azure-fips<5.15.0-1060.69+fips1
5.15.0-1060.69+fips1
ubuntu/linux-fips<5.15.0-102.112+fips1
5.15.0-102.112+fips1
ubuntu/linux-gcp-fips<5.15.0-1055.63+fips2
5.15.0-1055.63+fips2
ubuntu/linux-raspi-realtime<6.8.0-2001.1
6.8.0-2001.1
ubuntu/linux-vmware*

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade debian/linux to a version that resolves this vulnerability.

    Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1
  2. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1134.140
  3. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1179.194~14.04.1
  4. Upgrade

    Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

    Fixed in 4.4.0-257.291~14.04.1
  5. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.4.0-257.291
  6. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.4.0-1172.187
  7. Upgrade

    Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-1170.183~16.04.1
  8. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 4.15.0-1179.194~16.04.1
  9. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1164.181~16.04.1
  10. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-227.239~16.04.1
  11. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1135.145
  12. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1133.144~16.04.1
  13. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1103.110
  14. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-227.239
  15. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1170.183
  16. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1122.132~18.04.1
  17. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1179.194
  18. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1127.134~18.04.1
  19. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1164.181
  20. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1126.135~18.04.1
  21. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-175.195~18.04.1
  22. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1069.74~18.04.1
  23. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1154.159
  24. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1133.144
  25. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1121.130~18.04.1
  26. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1106.118~18.04.1
  27. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2109.115
  28. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2088.94
  29. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1125.136
  30. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2072.77
  31. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-176.196
  32. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1122.132
  33. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1057.63~20.04.1
  34. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1127.134
  35. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1060.69~20.04.1
  36. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1082.89
  37. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1126.135
  38. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.63~20.04.1
  39. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.4.0-1089.93
  40. Upgrade

    Upgrade ubuntu/linux-gkeop-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.46~20.04.1
  41. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-102.112~20.04.1
  42. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1069.74
  43. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1050.53~20.04.1
  44. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1052.58~20.04.1
  45. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1034.35
  46. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1110.117
  47. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-102.112~20.04.1
  48. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.25~20.04.1
  49. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1121.130
  50. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.61~20.04.1
  51. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1106.118
  52. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1053.57~20.04.1
  53. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1041.45
  54. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1122.132+fips1
  55. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1127.134+fips1
  56. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1096.106
  57. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1126.135+fips1
  58. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-102.112
  59. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1057.63
  60. Upgrade

    Upgrade ubuntu/linux-aws-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1017.17~22.04.2
  61. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1060.69
  62. Upgrade

    Upgrade ubuntu/linux-azure-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1018.19~22.04.2
  63. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1060.69.1
  64. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.63
  65. Upgrade

    Upgrade ubuntu/linux-gcp-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1017.17~22.04.1
  66. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1054.59
  67. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.46
  68. Upgrade

    Upgrade ubuntu/linux-hwe-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-27.28~22.04.1
  69. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1050.53
  70. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1052.58
  71. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1054.59
  72. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-102.112
  73. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-27.28.1~22.04.1
  74. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1048.48
  75. Upgrade

    Upgrade ubuntu/linux-nvidia-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1014.14
  76. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1025.25
  77. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1012.12
  78. Upgrade

    Upgrade ubuntu/linux-oem-6.1 to a version that resolves this vulnerability.

    Fixed in 6.1.0-1035.35
  79. Upgrade

    Upgrade ubuntu/linux-oem-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1019.20
  80. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.61
  81. Upgrade

    Upgrade ubuntu/linux-oracle-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1020.20~22.04.1
  82. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1050.53
  83. Upgrade

    Upgrade ubuntu/linux-riscv-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-27.28.1~22.04.1
  84. Upgrade

    Upgrade ubuntu/linux-starfive-6.5 to a version that resolves this vulnerability.

    Fixed in 6.5.0-1011.12~22.04.1
  85. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1030.34
  86. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1040.42
  87. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1050.52
  88. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1058.66
  89. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1057.63+fips1
  90. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1060.69+fips1
  91. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-102.112+fips1
  92. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1055.63+fips2
  93. Upgrade

    Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

    Fixed in 6.8.0-2001.1
  94. Configuration

    Apply the f2fs fix to explicitly null-terminate the xattr list when setting an xattr, removing the assumption that unused xattr space is always zeroed.

    Linux kernel (f2fs) xattr list termination = Explicitly null-terminate the xattr list when setting an xattr

Event History

Feb 20, 2024
CVE Published
via MITRE·06:34 PM
Data Sourced
via MITRE·06:34 PM
DescriptionSeverity
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Event
via OSV·09:15 PM
Data Sourced
via NVD·09:15 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2023-52436?

CVE-2023-52436 has been assigned a moderate severity level due to its impact on the stability and functionality of the Linux kernel.

2

How do I fix CVE-2023-52436?

To remediate CVE-2023-52436, update your Linux kernel to one of the fixed versions, such as 5.10.223-1, 6.1.123-1, or later.

3

Which Linux kernel versions are affected by CVE-2023-52436?

CVE-2023-52436 affects Linux kernel versions between 4.20.0 and 6.1.74, including specific versions within that range.

4

What components are impacted by CVE-2023-52436?

CVE-2023-52436 specifically impacts the f2fs file system in the Linux kernel regarding the handling of extended attributes.

5

Is CVE-2023-52436 being actively exploited?

As of the latest reports, there is no evidence suggesting that CVE-2023-52436 is actively being exploited in the wild.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203