CVE-2023-52601: jfs: fix array-index-out-of-bounds in dbAdjTree
In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds in dbAdjTree
Currently there is a bound check missing in the dbAdjTree while accessing the dmtstree. To add the required check added the bool isctl which is required to determine the size as suggest in the following commit. https://lore.kernel.org/linux-kernel-mentees/f9475918-2186-49b8-b801-6f0f9e75f4fa@oracle.com/
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.57.1-5 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 5.15.167.1-2 - Upgrade
Upgrade
Linux kernel (jfs)to a version that resolves this vulnerability.Patch f9475918-2186-49b8-b801-6f0f9e75f4fa@oracle.com
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52601?
CVE-2023-52601 is classified as having a medium severity due to potential array index out-of-bounds access.
How do I fix CVE-2023-52601?
To fix CVE-2023-52601, upgrade the Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.119-1, 6.1.123-1, 6.12.10-1, or 6.12.11-1.
What products are affected by CVE-2023-52601?
CVE-2023-52601 affects multiple versions of the Linux kernel specifically in Debian distributions.
What type of vulnerability is CVE-2023-52601?
CVE-2023-52601 is a coding error vulnerability specifically related to bounds checking in the Linux kernel.
What impact does CVE-2023-52601 have on system security?
CVE-2023-52601 could potentially lead to denial of service or arbitrary code execution under certain conditions.