In the Linux kernel, the following vulnerability has been resolved:
jfs: fix uaf in jfsevictinode
When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcucore() calls jfsfree_node().
Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.
[
{
"id": "CVE-2023-52600-0b05175e",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bacdaa04251382d7efd4f09f9a0686bfcc297e2e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-0fbc1639",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bacdaa04251382d7efd4f09f9a0686bfcc297e2e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-2066ef74",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0e1958f4c365e380b17ccb35617345b31ef7bf3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-26610a52",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1696d6d7d4a1b373e96428d0fe1166bd7c3c795e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-345c1905",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1696d6d7d4a1b373e96428d0fe1166bd7c3c795e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-4d2b305a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e44dc3f96e903815dab1d74fff8faafdc6feb61",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-5520ba3f",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e0e1958f4c365e380b17ccb35617345b31ef7bf3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-7b0fdd35",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32e8f2d95528d45828c613417cb2827d866cbdce",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-7dd067c2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b4249ef37297fb17ba102a524039a05c6c5d35",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-946ebe78",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32e8f2d95528d45828c613417cb2827d866cbdce",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-bc93a522",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-da8bb76c",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc6ef64dbe71136f327d63b2b9071b828af2c2a8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-e03410a7",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "176178800120245558350152017770249718703",
"length": 1987.0
},
"target": {
"function": "jfs_mount",
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-e0e197f2",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bc6ef64dbe71136f327d63b2b9071b828af2c2a8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-f54cba8d",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b4249ef37297fb17ba102a524039a05c6c5d35",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
},
{
"id": "CVE-2023-52600-f74630d5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e44dc3f96e903815dab1d74fff8faafdc6feb61",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"302268039639709984706676752960376636184",
"267787834806519798752566871452203650042",
"327854773473595592738671387849241653597",
"781715038797997162494928494313026406",
"184142534467324938977298926449043979333",
"322183140843574468652126733689332242895",
"152808172579728685040556583245448382114",
"66174017682822243465162540228228155102"
]
},
"target": {
"file": "fs/jfs/jfs_mount.c"
}
}
]