Lucene search

K
cvelistLinuxCVELIST:CVE-2023-52436
HistoryFeb 20, 2024 - 6:34 p.m.

CVE-2023-52436 f2fs: explicitly null-terminate the xattr list

2024-02-2018:34:47
Linux
raw.githubusercontent.com
2
linux kernel
vulnerability
f2fs
xattr
null-termination
cve-2023-52436

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%

In the Linux kernel, the following vulnerability has been resolved:

f2fs: explicitly null-terminate the xattr list

When setting an xattr, explicitly null-terminate the xattr list. This
eliminates the fragile assumption that the unused xattr space is always
zeroed.

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.2%