CVE-2023-53301: f2fs: fix kernel crash due to null io->bio
In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix kernel crash due to null io->bio
We should return when io->bio is null before doing anything. Otherwise, panic.
BUG: kernel NULL pointer dereference, address: 0000000000000010 RIP: 0010:submitmergedwritecond+0x164/0x240 [f2fs] Call Trace: <TASK> f2fssubmitmergedwrite+0x1d/0x30 [f2fs] commitcheckpoint+0x110/0x1e0 [f2fs] f2fswritecheckpoint+0x9f7/0xf00 [f2fs] ? pfxissuecheckpointthread+0x10/0x10 [f2fs] checkpointandcompletereqs+0x84/0x190 [f2fs] ? preemptcountadd+0x82/0xc0 ? pfxissuecheckpointthread+0x10/0x10 [f2fs] issuecheckpointthread+0x4c/0xf0 [f2fs] ? pfxautoremovewakefunction+0x10/0x10 kthread+0xff/0x130 ? pfxkthread+0x10/0x10 retfromfork+0x2c/0x50 </TASK>
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53301?
CVE-2023-53301 has a high severity due to the potential for kernel crashes caused by null pointer dereferences.
How do I fix CVE-2023-53301?
To fix CVE-2023-53301, update your Linux kernel to the latest stable version that includes the patch addressing this vulnerability.
What systems are affected by CVE-2023-53301?
CVE-2023-53301 affects systems running vulnerable versions of the Linux kernel.
What is the impact of CVE-2023-53301?
The impact of CVE-2023-53301 is a potential kernel panic, leading to system crashes and loss of availability.
When was CVE-2023-53301 disclosed?
CVE-2023-53301 was publicly disclosed in 2023.