In the Linux kernel, the following vulnerability has been resolved:
jfs: fix uaf in jfsevictinode
When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcucore() calls jfsfree_node().
Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.
{ "vanir_signatures": [ { "id": "CVE-2023-52600-0b05175e", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bacdaa04251382d7efd4f09f9a0686bfcc297e2e" }, { "id": "CVE-2023-52600-0fbc1639", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bacdaa04251382d7efd4f09f9a0686bfcc297e2e" }, { "id": "CVE-2023-52600-2066ef74", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0e1958f4c365e380b17ccb35617345b31ef7bf3" }, { "id": "CVE-2023-52600-26610a52", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1696d6d7d4a1b373e96428d0fe1166bd7c3c795e" }, { "id": "CVE-2023-52600-345c1905", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1696d6d7d4a1b373e96428d0fe1166bd7c3c795e" }, { "id": "CVE-2023-52600-4d2b305a", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e44dc3f96e903815dab1d74fff8faafdc6feb61" }, { "id": "CVE-2023-52600-5520ba3f", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0e1958f4c365e380b17ccb35617345b31ef7bf3" }, { "id": "CVE-2023-52600-7b0fdd35", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32e8f2d95528d45828c613417cb2827d866cbdce" }, { "id": "CVE-2023-52600-7dd067c2", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b4249ef37297fb17ba102a524039a05c6c5d35" }, { "id": "CVE-2023-52600-946ebe78", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32e8f2d95528d45828c613417cb2827d866cbdce" }, { "id": "CVE-2023-52600-bc93a522", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f" }, { "id": "CVE-2023-52600-da8bb76c", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc6ef64dbe71136f327d63b2b9071b828af2c2a8" }, { "id": "CVE-2023-52600-e03410a7", "signature_type": "Function", "target": { "file": "fs/jfs/jfs_mount.c", "function": "jfs_mount" }, "deprecated": false, "digest": { "length": 1987.0, "function_hash": "176178800120245558350152017770249718703" }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f" }, { "id": "CVE-2023-52600-e0e197f2", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc6ef64dbe71136f327d63b2b9071b828af2c2a8" }, { "id": "CVE-2023-52600-f54cba8d", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b4249ef37297fb17ba102a524039a05c6c5d35" }, { "id": "CVE-2023-52600-f74630d5", "signature_type": "Line", "target": { "file": "fs/jfs/jfs_mount.c" }, "deprecated": false, "digest": { "line_hashes": [ "302268039639709984706676752960376636184", "267787834806519798752566871452203650042", "327854773473595592738671387849241653597", "781715038797997162494928494313026406", "184142534467324938977298926449043979333", "322183140843574468652126733689332242895", "152808172579728685040556583245448382114", "66174017682822243465162540228228155102" ], "threshold": 0.9 }, "signature_version": "v1", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e44dc3f96e903815dab1d74fff8faafdc6feb61" } ] }