CVE-2023-53323: ext2/dax: Fix ext2_setsize when len is page aligned
ext2/dax: Fix ext2setsize when len is page aligned
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In ext2_setsize, call dax_truncate_page() instead of dax_zero_range() when the length is page aligned, preventing a zero max_blocks value from reaching ext2_get_blocks().
Event History
Frequently Asked Questions
What is the severity of CVE-2023-53323?
CVE-2023-53323 has a medium severity rating as it involves potential data corruption issues within the ext2 file system handling.
How do I fix CVE-2023-53323?
To mitigate CVE-2023-53323, update your Linux kernel to the latest version where the vulnerability has been addressed.
Which Linux kernel versions are affected by CVE-2023-53323?
CVE-2023-53323 affects multiple versions of the Linux kernel prior to the fix provided in subsequent updates.
What components are impacted by CVE-2023-53323?
CVE-2023-53323 specifically impacts the ext2 file system in the Linux kernel.
Is there a workaround for CVE-2023-53323?
There is no effective workaround for CVE-2023-53323; updating the kernel is the recommended solution.