CVE-2023-52602: jfs: fix slab-out-of-bounds Read in dtSearch
In the Linux kernel, the following vulnerability has been resolved:
jfs: fix slab-out-of-bounds Read in dtSearch
Currently while searching for current page in the sorted entry table of the page there is a out of bound access. Added a bound check to fix the error.
Dave: Set return code to -EIO
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.27-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52602?
CVE-2023-52602 has a medium severity level due to the potential for an out-of-bounds read in the Linux kernel's jfs functionality.
How can I mitigate CVE-2023-52602?
To mitigate CVE-2023-52602, update your Linux kernel to versions 5.10.223-1, 5.10.226-1, 6.1.123-1, 6.1.119-1, 6.12.10-1, or 6.12.11-1.
What systems are affected by CVE-2023-52602?
CVE-2023-52602 affects systems using certain versions of the Linux kernel, specifically those related to jfs functionality.
What type of vulnerability is CVE-2023-52602?
CVE-2023-52602 is characterized as a slab-out-of-bounds read vulnerability.
Who fixed CVE-2023-52602?
CVE-2023-52602 was fixed by contributors to the Linux kernel, including developer Dave.