In the Linux kernel, the following vulnerability has been resolved:
ext4: add bounds checking in getmaxinlinexattrvalue_size()
Normally the extended attributes in the inode body would have been checked when the inode is first opened, but if someone is writing to the block device while the file system is mounted, it's possible for the inode table to get corrupted. Add bounds checking to avoid reading beyond the end of allocated memory if this happens.
[
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d2caddbeeee56fbbc36b428c5b909c3ad88eb7f",
"id": "CVE-2023-53285-032d1305",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@486efbbc9445dca7890a1b86adbccb88b91284b0",
"id": "CVE-2023-53285-21fd2c05",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88a06a94942c5c0a896e9da1113a6bb29e36cbef",
"id": "CVE-2023-53285-2fb1a9ae",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2220eaf90992c11d888fe771055d4de330385f01",
"id": "CVE-2023-53285-64cbd807",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d7b8fbcd2273e2b9f4c6de5ce2f4c0cd3cb1205",
"id": "CVE-2023-53285-65404a17",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f22b274429e88d3dc7e79d375b56ce4f2f59f0b4",
"id": "CVE-2023-53285-6c37c33f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3d7b8fbcd2273e2b9f4c6de5ce2f4c0cd3cb1205",
"id": "CVE-2023-53285-74872616",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a229d21b98d132673096710e8281ef522dab1d1",
"id": "CVE-2023-53285-74a2070b",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2220eaf90992c11d888fe771055d4de330385f01",
"id": "CVE-2023-53285-76c88ba9",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4597554b4f7b29e7fd78aa449bab648f8da4ee2c",
"id": "CVE-2023-53285-84a4168f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5a229d21b98d132673096710e8281ef522dab1d1",
"id": "CVE-2023-53285-8f0ffa61",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@88a06a94942c5c0a896e9da1113a6bb29e36cbef",
"id": "CVE-2023-53285-c284a424",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f22b274429e88d3dc7e79d375b56ce4f2f59f0b4",
"id": "CVE-2023-53285-cf5d6aec",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e780058bd75614b66882bc02620ddbd884171560",
"id": "CVE-2023-53285-d2ad260c",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@486efbbc9445dca7890a1b86adbccb88b91284b0",
"id": "CVE-2023-53285-ef44e22f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"117245050714789018127745402339669719931",
"13694868420343708733718066002210443953",
"81797860064051437109819394733033806418",
"35948604063154710630445719497326370948",
"175596267006091376432838225463095926552",
"119884501571974548933158425195587465272",
"23843887568216283846250285892854576731",
"193252731545387164994699681563772628638",
"92270620868274145851047415274573792977",
"246803674205186233044903276422992631599",
"8196001142706021701554321348418308242",
"83940459347551351115618645035795116289",
"296444724443072848091037140626990101997",
"123926124178914474669300047288131062545"
]
},
"target": {
"file": "fs/ext4/inline.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e780058bd75614b66882bc02620ddbd884171560",
"id": "CVE-2023-53285-f3ce00cf",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4597554b4f7b29e7fd78aa449bab648f8da4ee2c",
"id": "CVE-2023-53285-f4bb463f",
"deprecated": false,
"signature_version": "v1"
},
{
"signature_type": "Function",
"digest": {
"function_hash": "118674320397750183219627663235131701658",
"length": 1169.0
},
"target": {
"file": "fs/ext4/inline.c",
"function": "get_max_inline_xattr_value_size"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1d2caddbeeee56fbbc36b428c5b909c3ad88eb7f",
"id": "CVE-2023-53285-fc4c070b",
"deprecated": false,
"signature_version": "v1"
}
]