CVE-2023-52601

jfs: fix array-index-out-of-bounds in dbAdjTree

High · published March 6, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in dbAdjTree

Currently there is a bound check missing in the dbAdjTree while

accessing the dmt_stree. To add the required check added the bool is_ctl

which is required to determine the size as suggest in the following

commit.

https://lore.kernel.org/linux-kernel-mentees/[email protected]/

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00249 · 15.3th percentile
Published
2024-03-06T06:45Z
EPSS history
Timeline
  • 06 MAR 06:45Z
    jfs: fix array-index-out-of-bounds in dbAdjTree
    cvelistv5