CVE-2023-52799: jfs: fix array-index-out-of-bounds in dbFindLeaf
In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds in dbFindLeaf
Currently while searching for dmtreet for sufficient free blocks there is an array out of bounds while getting element in tp->dmstree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.133-1Fixed in 6.12.22-1Fixed in 6.12.25-1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-52799?
CVE-2023-52799 is considered a moderate severity vulnerability due to potential array index out-of-bounds issues in the Linux kernel.
How do I fix CVE-2023-52799?
To fix CVE-2023-52799, update your Linux kernel to one of the patched versions: 5.10.223-1, 5.10.234-1, 6.1.123-1, 6.1.128-1, 6.12.12-1, or 6.12.17-1.
Which versions of the Linux kernel are affected by CVE-2023-52799?
CVE-2023-52799 affects various versions of the Linux kernel prior to the patched releases.
Is CVE-2023-52799 related to any specific Linux distributions?
Yes, CVE-2023-52799 is relevant to various Linux distributions that utilize affected versions of the Linux kernel.
What component of the Linux kernel does CVE-2023-52799 impact?
CVE-2023-52799 impacts the JFS (Journaling File System) component of the Linux kernel.