SB20240531207 - Out-of-bounds read in Linux kernel jfs
Published: May 31, 2024 Updated: May 14, 2025
Security Bulletin ID
SB20240531207
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2023-52805)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the diInitInode() and diAlloc() functions in fs/jfs/jfs_imap.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9
- https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083
- https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c
- https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1
- https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641
- https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d
- https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777
- https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8
- https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.14.331
- https://mirrors.edge.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.19.300
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.202
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.15.140
- https://mirrors.edge.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.262
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.64
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.13
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.3
- https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.7