In the Linux kernel, the following vulnerability has been resolved:
f2fs: explicitly null-terminate the xattr list
When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12cf91e23b126718a96b914f949f2cdfeadc7b2a",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "172989204617868309134644384113787293071",
"length": 2801.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-04fd00eb"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6c30bfe5a49bc38cae985083a11016800708fea",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-0b3ed068"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2525d1ba225b5c167162fa344013c408e8b4de36",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-1dfbcf94"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12cf91e23b126718a96b914f949f2cdfeadc7b2a",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-21b9c04c"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2525d1ba225b5c167162fa344013c408e8b4de36",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "155604410900260097696774123353164045752",
"length": 3048.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-2842f44d"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16ae3132ff7746894894927c1892493693b89135",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-3073c833"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32a6cfc67675ee96fe107aeed5af9776fec63f11",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "338689652098394577753556106514983049474",
"length": 2750.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-35312058"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e26b6d39270f5eab0087453d9b544189a38c8564",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-46c7d015"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32a6cfc67675ee96fe107aeed5af9776fec63f11",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-4f8f8b3d"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6c30bfe5a49bc38cae985083a11016800708fea",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "155604410900260097696774123353164045752",
"length": 3048.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-773ce1f6"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5de9e9dd1828db9b8b962f7ca42548bd596deb8a",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-7e1b36cd"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e47740091b05ac8d7836a33afd8646b6863ca52",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "145075898086929214920824457659228307954",
"length": 2747.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-9bd36c7b"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e47740091b05ac8d7836a33afd8646b6863ca52",
"target": {
"file": "fs/f2fs/xattr.c"
},
"digest": {
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
],
"threshold": 0.9
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"id": "CVE-2023-52436-b64fda8f"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e26b6d39270f5eab0087453d9b544189a38c8564",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "155604410900260097696774123353164045752",
"length": 3048.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-c063c08b"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5de9e9dd1828db9b8b962f7ca42548bd596deb8a",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "37472159428608097271301221261802320514",
"length": 3076.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-daff0475"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16ae3132ff7746894894927c1892493693b89135",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"digest": {
"function_hash": "36643824858328474054854419643012336601",
"length": 2530.0
},
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"id": "CVE-2023-52436-f3f41ec8"
}
]