Vulnerability identifier: #VU90905

Vulnerability risk: Low

CVSSv3.1: 4.8 [AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2023-52759

CWE-ID: CWE-617

Exploitation vector: Local

Exploit availability: No

Vulnerable software:
Linux kernel
Operating systems & Components / Operating system

Vendor: Linux Foundation

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the qd_check_sync() function in fs/gfs2/quota.c. A local user can perform a denial of service (DoS) attack.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Linux kernel:

---

External links
http://git.kernel.org/stable/c/1c28dace66015b675a343b89b0c87abbfda05ff4
http://git.kernel.org/stable/c/b4deec69fe32b58dc5fb4ace52456ece85b75561
http://git.kernel.org/stable/c/2bb42a27a92ff3984c9fa5fbe128eced3ea693f2
http://git.kernel.org/stable/c/2a054b87a1b799b391e578597a42ee6e57a987ae
http://git.kernel.org/stable/c/5bfda356e903633d16ae1bac1ee38364e12628a3
http://git.kernel.org/stable/c/53fc16c1ad84f5467ec24341670b63aa759335d3
http://git.kernel.org/stable/c/212f112fe5e90e98eb8d48585682880dae139f4c
http://git.kernel.org/stable/c/119565e566f91ff3588ffcd5812f0c8061586c6b
http://git.kernel.org/stable/c/4c6a08125f2249531ec01783a5f4317d7342add5

---

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.