Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-52588 State: PUBLISHED Published: 2024-03-06T06:45:21.925Z Last Updated: 2025-07-11T17:19:30.349Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gcing flag on page during block migration It needs to add missing gcing flag on page during block migration, in order to garantee migrated data be persisted during checkpoint, otherwise out-of-order persistency between data and node may cause data corruption after SPOR. Similar issue was fixed by commit 2d1fe8a86bf5 ("f2fs: fix to tag gcing flag on page during file defragment"). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment
gcing flag on page during file defragment"). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136 - https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515c - https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54dde - https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3 - https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44b
CVE ID: CVE-2023-52589 State: PUBLISHED Published: 2024-03-06T06:45:22.442Z Last Updated: 2025-05-04T07:39:20.368Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ disable race issue In rkisp1_isp_stop() and rkisp1_csi_disable() the driver masks the interrupts and then apparently assumes that the interrupt handler won't be running, and proceeds in the stop procedure. This is not the case, as the interrupt handler can already be running, which would lead to the ISP being disabled while the interrupt handler handling a captured frame. This brings up two issues: 1) the ISP could be powered off while the interr
interrupt handler handling a captured frame. This brings up two issues: 1) the ISP could be powered off while the interrupt handler is still running and accessing registers, leading to board lockup, and 2) the interrupt handler code and the code that disables the streaming might do things that conflict. It is not clear to me if 2) causes a real issue, but 1) can be seen with a suitable delay (or printk in my case) in the interrupt handler, leading to board lockup. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/bf808f58681cab64c81cd814551814fd34e540fe - https://git.kernel.org/stable/c/fab483438342984f2a315fe13c882a80f0
g/stable/c/bf808f58681cab64c81cd814551814fd34e540fe - https://git.kernel.org/stable/c/fab483438342984f2a315fe13c882a80f0f7e545 - https://git.kernel.org/stable/c/7bb1a2822aa2c2de4e09bf7c56dd93bd532f1fa7 - https://git.kernel.org/stable/c/870565f063a58576e8a4529f122cac4325c6b395
CVE ID: CVE-2023-52590 State: PUBLISHED Published: 2024-03-06T06:45:22.954Z Last Updated: 2025-05-04T07:39:21.491Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change ocfs2 rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9 - https://git.kernel.org/s
hment: References: - https://git.kernel.org/stable/c/de940cede3c41624e2de27f805b490999f419df9 - https://git.kernel.org/stable/c/9d618d19b29c2943527e3a43da0a35aea91062fc
CVE ID: CVE-2023-52591 State: PUBLISHED Published: 2024-03-06T06:45:23.480Z Last Updated: 2025-05-04T07:39:22.876Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debc - https://git.kernel
m Container: References: - https://git.kernel.org/stable/c/17e1361cb91dc1325834da95d2ab532959d2debc - https://git.kernel.org/stable/c/c04c162f82ac403917780eb6d1654694455d4e7c - https://git.kernel.org/stable/c/49db9b1b86a82448dfaf3fcfefcf678dee56c8ed
CVE ID: CVE-2023-52592 State: REJECTED Published: 2024-03-06T06:45:24.027Z Last Updated: 2024-03-07T20:12:21.365Z Description: No description available.
CVE ID: CVE-2023-52593 State: PUBLISHED Published: 2024-03-06T06:45:24.551Z Last Updated: 2025-05-20T14:27:28.879Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap() Since 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()' should check the return value before examining skb data. So convert the latter to return an appropriate error code and propagate it to return from 'wfx_start_ap()' as well. Compile tested only. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/574dcd3126aa2eed75437
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/574dcd3126aa2eed75437137843f254b1190dd03 - https://git.kernel.org/stable/c/9ab224744a47363f74ea29c6894c405e3bcf5132 - https://git.kernel.org/stable/c/3739121443f5114c6bcf6d841a5124deb006b878 - https://git.kernel.org/stable/c/fe0a7776d4d19e613bb8dd80fe2d78ae49e8b49d
CVE ID: CVE-2023-52594 State: PUBLISHED Published: 2024-03-06T06:45:25.071Z Last Updated: 2025-05-21T08:49:46.466Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus() Fix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug occurs when txs->cnt, data from a URB provided by a USB device, is bigger than the size of the array txs->txstatus, which is HTC_MAX_TX_STATUS. WARN_ON() already checks it, but there is no bug handling code after the check. Make the function return if that is the case. Found by a modified version of syzkaller. UBSAN: a
g code after the check. Make the function return if that is the case. Found by a modified version of syzkaller. UBSAN: array-index-out-of-bounds in htc_drv_txrx.c index 13 is out of range for type '__wmi_event_txstatus [12]' Call Trace: ath9k_htc_txstatus ath9k_wmi_event_tasklet tasklet_action_common __do_softirq irq_exit_rxu sysvec_apic_timer_interrupt Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/stable/c/f44f073c78112ff921a220d01b86d09f2ace59bc - https://git.kernel.org/stable/c/f11f0fd1ad6c11ae7856d4325fe9d05059767225 - https://git.kernel.org/stable/c/84770a996ad8d7f121ff2fb5a8d149aad52d64c1 - https://git.kernel.org/stable
9d05059767225 - https://git.kernel.org/stable/c/84770a996ad8d7f121ff2fb5a8d149aad52d64c1 - https://git.kernel.org/stable/c/9003fa9a0198ce004b30738766c67eb7373479c9 - https://git.kernel.org/stable/c/25c6f49ef59b7a9b80a3f7ab9e95268a1b01a234 - https://git.kernel.org/stable/c/e4f4bac7d3b64eb75f70cd3345712de6f68a215d - https://git.kernel.org/stable/c/be609c7002dd4504b15b069cb7582f4c778548d1 - https://git.kernel.org/stable/c/2adc886244dff60f948497b59affb6c6ebb3c348
CVE ID: CVE-2023-52595 State: PUBLISHED Published: 2024-03-06T06:45:25.577Z Last Updated: 2025-05-04T07:39:26.412Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: wifi: rt2x00: restart beacon queue when hardware reset When a hardware reset is triggered, all registers are reset, so all queues are forced to stop in hardware interface. However, mac80211 will not automatically stop the queue. If we don't manually stop the beacon queue, the queue will be deadlocked and unable to start again. This patch fixes the issue where Apple devices cannot connect to the AP after calling ieee80211_restart_hw(). Additional Analyst Notes: - CISA A
ue where Apple devices cannot connect to the AP after calling ieee80211_restart_hw(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/e1f113b57ddd18274d7c83618deca25cc880bc48 - https://git.kernel.org/stable/c/69e905beca193125820c201ab3db4fb0e245124e - https://git.kernel.org/stable/c/4cc198580a7b93a36f5beb923f40f7ae27a3716c - https://git.kernel.org/stable/c/739b3ccd9486dff04af95f9a890846d088a84957 - https://git.kernel.org/stable/c/04cfe4a5da57ab9358cdfadea22bcb37324aaf83 - https://git.kernel.org/stable/c/fdb580ed05df8973aa5149cafa598c64bebcd0cb - https://git.kernel.org/stable/c/a11d965a218f0cd95b13fe44d0bcd8a20ce134a8
CVE ID: CVE-2023-52596 State: PUBLISHED Published: 2024-03-06T06:45:26.094Z Last Updated: 2025-05-04T07:39:27.504Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: sysctl: Fix out of bounds access for empty sysctl registers When registering tables to the sysctl subsystem there is a check to see if header is a permanently empty directory (used for mounts). This check evaluates the first element of the ctl_table. This results in an out of bounds evaluation when registering empty directories. The function register_sysctl_mount_point now passes a ctl_table of size 1 instead of size 0. It now relies solely on the type to identify a pe
sysctl_mount_point now passes a ctl_table of size 1 instead of size 0. It now relies solely on the type to identify a permanently empty register. Make sure that the ctl_table has at least one element before testing for permanent emptiness. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/15893975e9e382f8294ea8d926f08dc2d8d39ede - https://git.kernel.org/stable/c/2ae7081bc10123b187e36a4f3a8e53768de31489 - https://git.kernel.org/stable/c/315552310c7de92baea4e570967066569937a843
CVE ID: CVE-2023-52597 State: PUBLISHED Published: 2024-03-06T06:45:26.608Z Last Updated: 2025-05-21T08:49:47.560Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: KVM: s390: fix setting of fpc register kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register. This may lead to corruption of the fpc register of the host process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx
aded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space. test_fp_ctl() restores the original user space / host process fpc register value, however it will be discarded, when returning to user space. In result the host process will incorrectly continue to run with the value that was supposed to be used for a guest cpu. Fix this by simply removing the test. There is another test right before the SIE context is entered which will handles invalid values. This results in a change of behaviou
her test right before the SIE context is entered which will handles invalid values. This results in a change of behaviour: invalid values will now be accepted instead of that the ioctl fails with -EINVAL. This seems to be acceptable, given that this interface is most likely not used anymore, and this is in addition the same behaviour implemented with the memory mapped interface (replace invalid values with zero) - see sync_regs() in kvm-s390.c. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3a04410b0bc7e056e0843ac598825dd359246d18 - https://git.kernel.org/stable/c/5e63c9ae8055109d805aacdaf2a4fe2c3b371ba1 - https://git
bc7e056e0843ac598825dd359246d18 - https://git.kernel.org/stable/c/5e63c9ae8055109d805aacdaf2a4fe2c3b371ba1 - https://git.kernel.org/stable/c/150a3a3871490e8c454ffbac2e60abeafcecff99 - https://git.kernel.org/stable/c/732a3bea7aba5b15026ea42d14953c3425cc7dc2 - https://git.kernel.org/stable/c/0671f42a9c1084db10d68ac347d08dbf6689ecb3 - https://git.kernel.org/stable/c/c87d7d910775a025e230fd6359b60627e392460f - https://git.kernel.org/stable/c/2823db0010c400e4b2b12d02aa5d0d3ecb15d7c7 - https://git.kernel.org/stable/c/b988b1bb0053c0dcd26187d29ef07566a565cf55
CVE ID: CVE-2023-52598 State: PUBLISHED Published: 2024-03-06T06:45:27.127Z Last Updated: 2025-05-04T07:39:30.133Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: s390/ptrace: handle setting of fpc register correctly If the content of the floating point control (fpc) register of a traced process is modified with the ptrace interface the new value is tested for validity by temporarily loading it into the fpc register. This may lead to corruption of the fpc register of the tracing process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector regi
while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space. test_fp_ctl() restores the original user space fpc register value, however it will be discarded, when returning to user space. In result the tracer will incorrectly continue to run with the value that was supposed to be used for the traced process. Fix this by saving fpu register contents with save_fpu_regs() before using test_fp_ctl(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Prog
contents with save_fpu_regs() before using test_fp_ctl(). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/6ccf904aac0292e1f6b1a1be6c407c414f7cf713 - https://git.kernel.org/stable/c/6d0822f2cc9b153bf2df49a84599195a2e0d21a8 - https://git.kernel.org/stable/c/856caf2730ea18cb39e95833719c02a02447dc0a - https://git.kernel.org/stable/c/28a1f492cb527f64593457a0a0f0d809b3f36c25 - https://git.kernel.org/stable/c/7a4d6481fbdd661f9e40e95febb95e3dee82bad3 - https://git.kernel.org/stable/c/02c6bbfb08bad78dd014e24c7b893723c15ec7a1 - https://git.kernel.org/stable/c/bdce67df7f12fb0409fbc604ce7c4254703f56d4 - https://git.kernel.org/sta
7b893723c15ec7a1 - https://git.kernel.org/stable/c/bdce67df7f12fb0409fbc604ce7c4254703f56d4 - https://git.kernel.org/stable/c/8b13601d19c541158a6e18b278c00ba69ae37829
CVE ID: CVE-2023-52599 State: PUBLISHED Published: 2024-03-06T06:45:27.655Z Last Updated: 2025-05-04T07:39:31.588Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diNewExt [Syz report] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:2360:2 index -878706688 is out of range for type 'struct iagctl[128]' CPU: 1 PID: 5065 Comm: syz-executor282 Not tainted 6.7.0-rc4-syzkaller-00009-gbee0e7762ad2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:
gle 11/10/2023 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e7/0x2d0 lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0x11c/0x150 lib/ubsan.c:348 diNewExt+0x3cf3/0x4000 fs/jfs/jfs_imap.c:2360 diAllocExt fs/jfs/jfs_imap.c:1949 [inline] diAllocAG+0xbe8/0x1e50 fs/jfs/jfs_imap.c:1666 diAlloc+0x1d3/0x1760 fs/jfs/jfs_imap.c:1587 ialloc+0x8f/0x900 fs/jfs/jfs_inode.c:56 jfs_mkdir+0x1c5/0xb90 fs/jfs/namei.c:225 vfs_mkdir+0x2f1/0x4b0 fs/namei.c:4106 do_mkdirat+0x264/0x3a0 fs/namei.c:4129 __do_sys_mkdir fs/namei.c:4149 [inline] __se_sys_mkdir fs/namei.c:4147 [inline] __x64_sys_mkdir+0x6e/0x80 fs/namei.c:4147 do_syscall_x64 arch/
i.c:4149 [inline] __se_sys_mkdir fs/namei.c:4147 [inline] __x64_sys_mkdir+0x6e/0x80 fs/namei.c:4147 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x45/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7fcb7e6a0b57 Code: ff ff 77 07 31 c0 c3 0f 1f 40 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffd83023038 EFLAGS: 00000286 ORIG_RAX: 0000000000000053 RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00007fcb7e6a0b57 RDX: 00000000000a1020 RSI: 00000000000001ff RDI: 0000000020000140 RBP: 0000000020000140 R08: 0
fff RCX: 00007fcb7e6a0b57 RDX: 00000000000a1020 RSI: 00000000000001ff RDI: 0000000020000140 RBP: 0000000020000140 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000286 R12: 00007ffd830230d0 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [Analysis] When the agstart is too large, it can cause agno overflow. [Fix] After obtaining agno, if the value is invalid, exit the subsequent process. Modified the test from agno > MAXAG to agno >= MAXAG based on linux-next report by kernel test robot (Dan Carpenter). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f423528488e4f9606c
otes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/f423528488e4f9606cef858eceea210bf1163f41 - https://git.kernel.org/stable/c/de6a91aed1e0b1a23e9c11e7d7557f088eeeb017 - https://git.kernel.org/stable/c/e2b77d107b33bb31c8b1f5c4cb8f277b23728f1e - https://git.kernel.org/stable/c/6aa30020879042d46df9f747e4f0a486eea6fe98 - https://git.kernel.org/stable/c/3537f92cd22c672db97fae6997481e678ad14641 - https://git.kernel.org/stable/c/6996d43b14486f4a6655b10edc541ada1b580b4b - https://git.kernel.org/stable/c/5a6660139195f5e2fbbda459eeecb8788f3885fe - https://git.kernel.org/stable/c/49f9637aafa6e63ba686c13cb8549bf5e6920402
CVE ID: CVE-2023-52600 State: PUBLISHED Published: 2024-03-06T06:45:28.198Z Last Updated: 2025-05-04T07:39:32.864Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls jfs_free_node(). Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6
Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/81b4249ef37297fb17ba102a524039a05c6c5d35 - https://git.kernel.org/stable/c/93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f - https://git.kernel.org/stable/c/bc6ef64dbe71136f327d63b2b9071b828af2c2a8 - https://git.kernel.org/stable/c/8e44dc3f96e903815dab1d74fff8faafdc6feb61 - https://git.kernel.org/stable/c/32e8f2d95528d45828c613417cb2827d866cbdce - https://git.kernel.org/stable/c/1696d6d7d4a1b373e96428d0fe1166bd7c3c795e - https://git.kernel.org/stable/c/bacdaa04251382d7efd4f09f9a0686bfcc297e2e - https://git.kernel.org/stable/c/e0e1958f4c365e380b17ccb35617345b31ef7bf3
CVE ID: CVE-2023-52601 State: PUBLISHED Published: 2024-03-06T06:45:28.715Z Last Updated: 2025-05-04T07:39:34.043Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Currently there is a bound check missing in the dbAdjTree while accessing the dmt_stree. To add the required check added the bool is_ctl which is required to determine the size as suggest in the following commit. https://lore.kernel.org/linux-kernel-mentees/f9475918-2186-49b8-b801-6f0f9e75f4fa@oracle.com/ Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stabl
/ Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/3d3898b4d72c677d47fe3cb554449f2df5c12555 - https://git.kernel.org/stable/c/3f8217c323fd6ecd6829a0c3ae7ac3f14eac368e - https://git.kernel.org/stable/c/2037cb9d95f1741885f7daf50e8a028c4ade5317 - https://git.kernel.org/stable/c/8393c80cce45f40c1256d72e21ad351b3650c57e - https://git.kernel.org/stable/c/70780914cb57e2ba711e0ac1b677aaaa75103603 - https://git.kernel.org/stable/c/2e16a1389b5a7983b45cb2aa20b0e3f0ee364d6c - https://git.kernel.org/stable/c/fc67a2e18f4c4e3f07e9f9ae463da24530470e73 - https://git.kernel.org/stable/c/74ecdda68242b174920fe7c6133a856fb7d8559b
CVE ID: CVE-2023-52602 State: PUBLISHED Published: 2024-03-06T06:45:29.227Z Last Updated: 2025-05-04T07:39:40.569Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: jfs: fix slab-out-of-bounds Read in dtSearch Currently while searching for current page in the sorted entry table of the page there is a out of bound access. Added a bound check to fix the error. Dave: Set return code to -EIO Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://git.kernel.org/stable/c/ce8bc22e948634a5c0a3fa58a179177d0e3f3950 - https://git.kernel.org/stable/c/1b9d6828589d57f94a23fb1c46112cda39d7efdb - https:/
22e948634a5c0a3fa58a179177d0e3f3950 - https://git.kernel.org/stable/c/1b9d6828589d57f94a23fb1c46112cda39d7efdb - https://git.kernel.org/stable/c/1c40ca3d39d769931b28295b3145c25f1decf5a6 - https://git.kernel.org/stable/c/6c6a96c3d74df185ee344977d46944d6f33bb4dd - https://git.kernel.org/stable/c/cab0c265ba182fd266c2aa3c69d7e40640a7f612 - https://git.kernel.org/stable/c/7110650b85dd2f1cee819acd1345a9013a1a62f7 - https://git.kernel.org/stable/c/bff9d4078a232c01e42e9377d005fb2f4d31a472 - https://git.kernel.org/stable/c/fa5492ee89463a7590a1449358002ff7ef63529f
CVE ID: CVE-2023-52603 State: PUBLISHED Published: 2024-03-06T06:45:29.731Z Last Updated: 2025-05-04T07:39:42.168Z Vendors: Linux Products: Linux Description: In the Linux kernel, the following vulnerability has been resolved: UBSAN: array-index-out-of-bounds in dtSplitRoot Syzkaller reported the following issue: oop0: detected capacity change from 0 to 32768 UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dtree.c:1971:9 index -2 is out of range for type 'struct dtslot [128]' CPU: 0 PID: 3613 Comm: syz-executor270 Not tainted 6.0.0-syzkaller-09423-g493ffd6605b2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: <TASK> __dump_stack lib/dump
ame: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1b1/0x28e lib/dump_stack.c:106 ubsan_epilogue lib/ubsan.c:151 [inline] __ubsan_handle_out_of_bounds+0xdb/0x130 lib/ubsan.c:283 dtSplitRoot+0x8d8/0x1900 fs/jfs/jfs_dtree.c:1971 dtSplitUp fs/jfs/jfs_dtree.c:985 [inline] dtInsert+0x1189/0x6b80 fs/jfs/jfs_dtree.c:863 jfs_mkdir+0x757/0xb00 fs/jfs/namei.c:270 vfs_mkdir+0x3b3/0x590 fs/namei.c:4013 do_mkdirat+0x279/0x550 fs/namei.c:4038 __do_sys_mkdirat fs/namei.c:4053 [inline] __se_sys_mkdirat fs/namei.c:4051 [inline] __x64_sys_mkdirat+0x85/0x90 fs/namei.c:4051 do_syscall_x64 arch/x86/entry/co