CVE-2023-52805

HIGH

Linux Kernel < 4.14.331 - Array Index Out-of-Bounds in JFS diAlloc

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.

References (9)

Core 9

Scores

CVSS v3 7.8
EPSS 0.0026
EPSS Percentile 17.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-129
Status published
Products (29)
linux/Kernel 2.6.12 - 4.14.331linux
linux/Kernel 4.15.0 - 4.19.300linux
linux/Kernel 4.20.0 - 5.4.262linux
linux/Kernel 5.11.0 - 5.15.140linux
linux/Kernel 5.16.0 - 6.1.64linux
linux/Kernel 5.5.0 - 5.10.202linux
linux/Kernel 6.2.0 - 6.5.13linux
linux/Kernel 6.6.0 - 6.6.3linux
Linux/Linux < 2.6.12
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 05d9ea1ceb62a55af6727a69269a4fd310edf483
... and 19 more
Published May 21, 2024
Tracked Since Feb 18, 2026