Log in Start free

Vulnerability · Published Mar 6, 2024 · Assigned by Linux

CVE-2023-52602jfs: fix slab-out-of-bounds Read in dtSearch

High 7.8

In plain English

A high-severity uncontrolled resource consumption in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 83.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds Read in dtSearch Currently while searching for current page in the sorted entry table of the page there is a out of bound access. Added a bound check to fix the error. Dave: Set return code to -EIO

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux6.1.82-1DEBIAN-CVE-2023-52602
Debian:13linux6.7.7-1DEBIAN-CVE-2023-52602
Debian:14linux6.7.7-1DEBIAN-CVE-2023-52602
Ubuntu:22.04:LTSlinux5.15.0-106.116UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux5.15.0-106.116USN-6766-1
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67USN-6766-3
Ubuntu:22.04:LTSlinux-aws5.15.0-1061.67UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1020.20~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-aws-6.56.5.0-1020.20~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-azure5.15.0-1063.72USN-6766-1
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1021.22~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-azure-6.56.5.0-1021.22~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1063.72.1USN-6766-1
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gcp5.15.0-1059.67USN-6766-1
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1020.20~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gcp-6.56.5.0-1020.20~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63USN-6766-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1058.63UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1044.51USN-6766-1
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-35.35~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-hwe-6.56.5.0-35.35~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57USN-6766-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1054.57UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63USN-6795-1
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1057.63UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-kvm5.15.0-1058.63USN-6766-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116USN-6766-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-106.116UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-35.35.1~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.56.5.0-35.35.1~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55USN-6766-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1054.55UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1019.19USN-6774-1
Ubuntu:22.04:LTSlinux-nvidia-6.56.5.0-1019.19UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1026.26UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1015.15UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-oem-6.16.1.0-1035.35USN-6688-1
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1023.24UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-oem-6.56.5.0-1023.24USN-6774-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65USN-6766-1
Ubuntu:22.04:LTSlinux-oracle5.15.0-1059.65UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1023.23~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-oracle-6.56.5.0-1023.23~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57USN-6766-2
Ubuntu:22.04:LTSlinux-raspi5.15.0-1054.57UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-riscv-6.56.5.0-35.35.1~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1014.15~22.04.1USN-6774-1
Ubuntu:22.04:LTSlinux-starfive-6.56.5.0-1014.15~22.04.1UBUNTU-CVE-2023-52602
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1030.34UBUNTU-CVE-2023-52602

Affected products (as reported)

VendorProductVersions
Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before ce8bc22e948634a5c0a3fa58a179177d0e3f39501da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 1b9d6828589d57f94a23fb1c46112cda39d7efdb1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 1c40ca3d39d769931b28295b3145c25f1decf5a61da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 6c6a96c3d74df185ee344977d46944d6f33bb4dd1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before cab0c265ba182fd266c2aa3c69d7e40640a7f6121da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before 7110650b85dd2f1cee819acd1345a9013a1a62f71da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before bff9d4078a232c01e42e9377d005fb2f4d31a4721da177e4c3f41524e886b7f1b8a0c1fc7321cac2 – before fa5492ee89463a7590a1449358002ff7ef63529f
Linux Linux 2.6.12

Weakness: CWE-400 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References