7.8

CVE-2023-52799

jfs: fix array-index-out-of-bounds in dbFindLeaf

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in dbFindLeaf

Currently while searching for dmtree_t for sufficient free blocks there
is an array out of bounds while getting element in tp->dm_stree. To add
the required check for out of bound we first need to determine the type
of dmtree. Thus added an extra parameter to dbFindLeaf so that the type
of tree can be determined and the required check can be applied.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version < 4.14.331
Linux ≫ Linux Kernel Version >= 4.15 < 4.19.300
Linux ≫ Linux Kernel Version >= 4.20 < 5.4.262
Linux ≫ Linux Kernel Version >= 5.5 < 5.10.202
Linux ≫ Linux Kernel Version >= 5.11 < 5.15.140
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.64
Linux ≫ Linux Kernel Version >= 6.2 < 6.5.13
Linux ≫ Linux Kernel Version >= 6.6 < 6.6.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.26% 0.168
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-129 Improper Validation of Array Index

The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

https://git.kernel.org/stable/c/20f9310a18e3e99fc031e036fcbed67105ae1859
Patch
https://git.kernel.org/stable/c/22cad8bc1d36547cdae0eef316c47d917ce3147c
Patch
https://git.kernel.org/stable/c/81aa58cd8495b8c3b527f58ccbe19478d8087f61
Patch
https://git.kernel.org/stable/c/86df90f3fea7c5591f05c8a0010871d435e83046
Patch
https://git.kernel.org/stable/c/87c681ab49e99039ff2dd3e71852417381b13878
Patch
https://git.kernel.org/stable/c/88b7894a8f8705bf4e7ea90b10229376abf14514
Patch
https://git.kernel.org/stable/c/a50b796d36719757526ee094c703378895ab5e67
Patch
https://git.kernel.org/stable/c/da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9
Patch
https://git.kernel.org/stable/c/ecfb47f13b08b02cf28b7b50d4941eefa21954d2
Patch