Lucene search

K
cvelistLinuxCVELIST:CVE-2023-52600
HistoryMar 06, 2024 - 6:45 a.m.

CVE-2023-52600 jfs: fix uaf in jfs_evict_inode

2024-03-0606:45:28
Linux
raw.githubusercontent.com
2
linux
kernel
jfs_evict_inode
uaf
vulnerability
fix

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix uaf in jfs_evict_inode

When the execution of diMount(ipimap) fails, the object ipimap that has been
released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs
when rcu_core() calls jfs_free_node().

Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as
ipimap.

6.2 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.7%