CVE-2023-52799CWE-129

CVE-2023-52799

High · published May 21, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
16.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in dbFindLeaf

Currently while searching for dmtree_t for sufficient free blocks there

is an array out of bounds while getting element in tp->dm_stree. To add

the required check for out of bound we first need to determine the type

of dmtree. Thus added an extra parameter to dbFindLeaf so that the type

of tree can be determined and the required check can be applied.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00257 · 16.4th percentile
Weakness
CWE-129 · Improper Validation of Array Index
Published
2024-05-21T20:15Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel< 4.14.3314.14.331
linux/linux_kernel≥ 4.15, < 4.19.3004.19.300
linux/linux_kernel≥ 4.20, < 5.4.2625.4.262
linux/linux_kernel≥ 5.5, < 5.10.2025.10.202
linux/linux_kernel≥ 5.11, < 5.15.1405.15.140
linux/linux_kernel≥ 5.16, < 6.1.646.1.64
linux/linux_kernel≥ 6.2, < 6.5.136.5.13
linux/linux_kernel≥ 6.6, < 6.6.36.6.3
References (18)
https://git.kernel.org/stable/c/20f9310a18e3e99fc031e036fcbed67105ae1859 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/22cad8bc1d36547cdae0eef316c47d917ce3147c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/81aa58cd8495b8c3b527f58ccbe19478d8087f61 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/86df90f3fea7c5591f05c8a0010871d435e83046 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/87c681ab49e99039ff2dd3e71852417381b13878 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/88b7894a8f8705bf4e7ea90b10229376abf14514 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a50b796d36719757526ee094c703378895ab5e67 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/ecfb47f13b08b02cf28b7b50d4941eefa21954d2 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/20f9310a18e3e99fc031e036fcbed67105ae1859 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/22cad8bc1d36547cdae0eef316c47d917ce3147c · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/81aa58cd8495b8c3b527f58ccbe19478d8087f61 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/86df90f3fea7c5591f05c8a0010871d435e83046 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/87c681ab49e99039ff2dd3e71852417381b13878 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/88b7894a8f8705bf4e7ea90b10229376abf14514 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/a50b796d36719757526ee094c703378895ab5e67 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9 · af854a3a-2127-422b-91ae-364da2661108https://git.kernel.org/stable/c/ecfb47f13b08b02cf28b7b50d4941eefa21954d2 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 21 MAY 15:31Z
    jfs: fix array-index-out-of-bounds in dbFindLeaf
    cvelistv5