In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Add validity check for dbmaxag and dbagpref
Both dbmaxag and dbagpref are used as the index of the dbagfree array, but there is currently no validity check for dbmaxag and db_agpref, which can lead to errors.
The following is related bug reported by Syzbot:
UBSAN: array-index-out-of-bounds in fs/jfs/jfsdmap.c:639:20 index 7936 is out of range for type 'atomict[128]'
Add checking that the values of dbmaxag and dbagpref are valid indexes for the db_agfree array.
[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2323de34a3ae61a9f9b544c18583f71cea86721f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-33203a6a",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32bd8f1cbcf8b663e29dd1f908ba3a129541a11b",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-3af3cee9",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f74d336990f37703a8eee77153463d65b67f70e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-3bd13ee8",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6c8863fb3f57700ab583d875adda04caaf2278a",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-483833d7",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0649e2dd4a3595b5595a29d0064d047c2fae2fb",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-528829bd",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6c8863fb3f57700ab583d875adda04caaf2278a",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-551641b6",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce15b0f1a431168f07b1cc6c9f71206a2db5c809",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-5ce85b8a",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0649e2dd4a3595b5595a29d0064d047c2fae2fb",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-5d60cf89",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce15b0f1a431168f07b1cc6c9f71206a2db5c809",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-7163e71f",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f74d336990f37703a8eee77153463d65b67f70e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-77f09931",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5013f8269887642cca784adc8db9b5f0b771533f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-7a5cdef3",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5013f8269887642cca784adc8db9b5f0b771533f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-acb372be",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dca403bb035a565bb98ecc1dda5d30f676feda40",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-b79bd9ef",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64933ab7b04881c6c18b21ff206c12278341c72e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-bee2e0de",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dca403bb035a565bb98ecc1dda5d30f676feda40",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-cc86bcad",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2323de34a3ae61a9f9b544c18583f71cea86721f",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-cffd5a9f",
"target": {
"function": "dbMount",
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Function",
"digest": {
"length": 1937.0,
"function_hash": "206849916833819198927277892468200930956"
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32bd8f1cbcf8b663e29dd1f908ba3a129541a11b",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-d1bcee29",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64933ab7b04881c6c18b21ff206c12278341c72e",
"signature_version": "v1",
"deprecated": false,
"id": "CVE-2023-52804-fadb4585",
"target": {
"file": "fs/jfs/jfs_dmap.c"
},
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"18564641095850081107946448153904634440",
"192465900955299737757090456837024530734",
"268110968898883667212676654538942252670",
"315851752469155505462066383439169023596"
]
}
}
]