CVE-2023-52810

HIGH

Linux Kernel < 4.14.331 - Integer Overflow via Negative db_l2nbperpage Shift

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(number of blks per page), and the minimum legal value should be 0, not negative. In the case of l2nbperpage being negative, an error will occur when subsequently used as shift exponent. Syzbot reported this bug: UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:799:12 shift exponent -16777216 is negative

References (9)

Core 9

Scores

CVSS v3 8.4
EPSS 0.0027
EPSS Percentile 19.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-1335
Status published
Products (29)
linux/Kernel 2.6.12 - 4.14.331linux
linux/Kernel 4.15.0 - 4.19.300linux
linux/Kernel 4.20.0 - 5.4.262linux
linux/Kernel 5.11.0 - 5.15.140linux
linux/Kernel 5.16.0 - 6.1.64linux
linux/Kernel 5.5.0 - 5.10.202linux
linux/Kernel 6.2.0 - 6.5.13linux
linux/Kernel 6.6.0 - 6.6.3linux
Linux/Linux < 2.6.12
Linux/Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 - 0cb567e727339a192f9fd0db00781d73a91d15a6
... and 19 more
Published May 21, 2024
Tracked Since Feb 18, 2026