CVE-2023-52810
Assigner: Linux
Published: 2024-05-21T15:31:19.629Z
State: PUBLISHED
descriptions: value: In the Linux kernel, the following vulnerability has been resolved:

fs/jfs: Add check for negative db_l2nbperpage

l2nbperpage is log2(number of blks per page), and the minimum legal
value should be 0, not negative.

In the case of l2nbperpage being negative, an error will occur
when subsequently used as shift exponent.

Syzbot reported this bug:

UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:799:12
shift exponent -16777216 is negative
affected: product: Linux
vendor: Linux
defaultStatus: unaffected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 1da177e4c3f4
lessThan: cc61fcf7d1c9
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 8f2964df6bfc
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: a81a56b4cbe3
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 524b4f203afc
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 5f148b16972e
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 0cb567e72733
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 491085258185
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 1a7c53fdea1d
status: affected
versionType: git
version: 1da177e4c3f4
lessThan: 525b861a0081
status: affected
versionType: git
product: Linux
vendor: Linux
defaultStatus: affected
repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
versions: version: 4.14.331
lessThanOrEqual: 4.14.*
status: unaffected
versionType: custom
version: 4.19.300
lessThanOrEqual: 4.19.*
status: unaffected
versionType: custom
version: 5.4.262
lessThanOrEqual: 5.4.*
status: unaffected
versionType: custom
version: 5.10.202
lessThanOrEqual: 5.10.*
status: unaffected
versionType: custom
version: 5.15.140
lessThanOrEqual: 5.15.*
status: unaffected
versionType: custom
version: 6.1.64
lessThanOrEqual: 6.1.*
status: unaffected
versionType: custom
version: 6.5.13
lessThanOrEqual: 6.5.*
status: unaffected
versionType: custom
version: 6.6.3
lessThanOrEqual: 6.6.*
status: unaffected
versionType: custom
version: 6.7
lessThanOrEqual: *
status: unaffected
versionType: original_commit_for_fix
title: fs/jfs: Add check for negative db_l2nbperpage
x_generator: engine: bippy-d175d3acf727