In the Linux kernel, the following vulnerability has been resolved:
f2fs: explicitly null-terminate the xattr list
When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52436.json"
}[
{
"digest": {
"length": 2801.0,
"function_hash": "172989204617868309134644384113787293071"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12cf91e23b126718a96b914f949f2cdfeadc7b2a",
"deprecated": false,
"id": "CVE-2023-52436-04fd00eb",
"signature_type": "Function",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6c30bfe5a49bc38cae985083a11016800708fea",
"deprecated": false,
"id": "CVE-2023-52436-0b3ed068",
"signature_type": "Line",
"target": {
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@12cf91e23b126718a96b914f949f2cdfeadc7b2a",
"deprecated": false,
"id": "CVE-2023-52436-21b9c04c",
"signature_type": "Line",
"target": {
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16ae3132ff7746894894927c1892493693b89135",
"deprecated": false,
"id": "CVE-2023-52436-3073c833",
"signature_type": "Line",
"target": {
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2750.0,
"function_hash": "338689652098394577753556106514983049474"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32a6cfc67675ee96fe107aeed5af9776fec63f11",
"deprecated": false,
"id": "CVE-2023-52436-35312058",
"signature_type": "Function",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e26b6d39270f5eab0087453d9b544189a38c8564",
"deprecated": false,
"id": "CVE-2023-52436-46c7d015",
"signature_type": "Line",
"target": {
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32a6cfc67675ee96fe107aeed5af9776fec63f11",
"deprecated": false,
"id": "CVE-2023-52436-4f8f8b3d",
"signature_type": "Line",
"target": {
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 3048.0,
"function_hash": "155604410900260097696774123353164045752"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f6c30bfe5a49bc38cae985083a11016800708fea",
"deprecated": false,
"id": "CVE-2023-52436-773ce1f6",
"signature_type": "Function",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2747.0,
"function_hash": "145075898086929214920824457659228307954"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e47740091b05ac8d7836a33afd8646b6863ca52",
"deprecated": false,
"id": "CVE-2023-52436-9bd36c7b",
"signature_type": "Function",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"340073181245510561549311036542952766096",
"213579903450402443443804903100222969300",
"58790638380728333627907935998095623894",
"82642314731961523889556874363361770088"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3e47740091b05ac8d7836a33afd8646b6863ca52",
"deprecated": false,
"id": "CVE-2023-52436-b64fda8f",
"signature_type": "Line",
"target": {
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 3048.0,
"function_hash": "155604410900260097696774123353164045752"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e26b6d39270f5eab0087453d9b544189a38c8564",
"deprecated": false,
"id": "CVE-2023-52436-c063c08b",
"signature_type": "Function",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
},
{
"digest": {
"length": 2530.0,
"function_hash": "36643824858328474054854419643012336601"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@16ae3132ff7746894894927c1892493693b89135",
"deprecated": false,
"id": "CVE-2023-52436-f3f41ec8",
"signature_type": "Function",
"target": {
"function": "__f2fs_setxattr",
"file": "fs/f2fs/xattr.c"
},
"signature_version": "v1"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-52436.json"