CVE-2023-52805
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.26%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.
- CVSS 3.1
- 7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.26% probability · 17th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-129
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483Patch
- https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8Patch
- https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1Patch
- https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9Patch
- https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641Patch
- https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777Patch
- https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2cPatch
- https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6dPatch
- https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083Patch
- https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483Patch
- https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8Patch
- https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1Patch
- https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9Patch
- https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641Patch
- https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777Patch
- https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2cPatch
- https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6dPatch
- https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083Patch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.