CVE-2023-52805 - OpenCVE

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

No data.

No data.

No data.

References

Link	Providers
https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483
https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8
https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1
https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9
https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641
https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777
https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c
https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d
https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083
https://lore.kernel.org/linux-cve-announce/2024052100-CVE-2023-52805-1338@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2023-52805
https://www.cve.org/CVERecord?id=CVE-2023-52805

History

Mon, 04 Nov 2024 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-05-21T15:31:16.374Z

Updated: 2024-11-04T14:53:03.363Z

Reserved: 2024-05-21T15:19:24.247Z

Link: CVE-2023-52805

Vulnrichment

Updated: 2024-08-02T23:11:36.055Z

NVD

Status : Awaiting Analysis

Published: 2024-05-21T16:15:18.890

Modified: 2024-05-21T16:53:56.550

Link: CVE-2023-52805

Redhat

Severity : Moderate

Publid Date: 2024-05-21T00:00:00Z

Links: CVE-2023-52805 - Bugzilla

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52805", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-05-21T15:19:24.247Z", "datePublished": "2024-05-21T15:31:16.374Z", "dateUpdated": "2024-11-04T14:53:03.363Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:53:03.363Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in diAlloc\n\nCurrently there is not check against the agno of the iag while\nallocating new inodes to avoid fragmentation problem. Added the check\nwhich is required."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/jfs/jfs_imap.c"], "versions": [{"version": "1da177e4c3f4", "lessThan": "2308d0fb0dc3", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "cf7e3e84df36", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "7467ca10a5ff", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "1ba7df5457dc", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "64f062baf202", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "8c68af2af697", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "665b44e55c27", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "1708d0a9917f", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f4", "lessThan": "05d9ea1ceb62", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/jfs/jfs_imap.c"], "versions": [{"version": "4.14.331", "lessThanOrEqual": "4.14.*", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.300", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.262", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.202", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.140", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.64", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.5.13", "lessThanOrEqual": "6.5.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.3", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "references": [{"url": "https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9"}, {"url": "https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083"}, {"url": "https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c"}, {"url": "https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1"}, {"url": "https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641"}, {"url": "https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d"}, {"url": "https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777"}, {"url": "https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8"}, {"url": "https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483"}], "title": "jfs: fix array-index-out-of-bounds in diAlloc", "x_generator": {"engine": "bippy-9e1c9544281a"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52805", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-23T17:20:14.067853Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:24:11.929Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.055Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:11:36.055Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52805", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-05-23T17:20:14.067853Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T17:20:19.487Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "jfs: fix array-index-out-of-bounds in diAlloc", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "1da177e4c3f4", "lessThan": "2308d0fb0dc3", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "cf7e3e84df36", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "7467ca10a5ff", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "1ba7df5457dc", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "64f062baf202", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "8c68af2af697", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "665b44e55c27", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "1708d0a9917f", "versionType": "git"}, {"status": "affected", "version": "1da177e4c3f4", "lessThan": "05d9ea1ceb62", "versionType": "git"}], "programFiles": ["fs/jfs/jfs_imap.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "unaffected", "version": "4.14.331", "versionType": "semver", "lessThanOrEqual": "4.14.*"}, {"status": "unaffected", "version": "4.19.300", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.262", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.202", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.140", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.64", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.5.13", "versionType": "semver", "lessThanOrEqual": "6.5.*"}, {"status": "unaffected", "version": "6.6.3", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/jfs/jfs_imap.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9"}, {"url": "https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083"}, {"url": "https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c"}, {"url": "https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1"}, {"url": "https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641"}, {"url": "https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d"}, {"url": "https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777"}, {"url": "https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8"}, {"url": "https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483"}], "x_generator": {"engine": "bippy-9e1c9544281a"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix array-index-out-of-bounds in diAlloc\n\nCurrently there is not check against the agno of the iag while\nallocating new inodes to avoid fragmentation problem. Added the check\nwhich is required."}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2024-11-04T14:53:03.363Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52805", "state": "PUBLISHED", "dateUpdated": "2024-11-04T14:53:03.363Z", "dateReserved": "2024-05-21T15:19:24.247Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-05-21T15:31:16.374Z", "assignerShortName": "Linux"}, "dataVersion": "5.1"}