PT-2023-9197 · Linux+6 · Linux Kernel+6

Publicado

2023-11-06

·

Atualizado

2026-01-12

·

CVE-2023-52760

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a use-after-free vulnerability in the gfs2 file system, specifically in the gfs2 put super() function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The problem arises when the quota is not properly cleaned up by gfs2 quota cleanup(), leading to the freeing of struct gfs2 sbd before the gfs2 qd dealloc callback has run for all gfs2 quota data objects, resulting in a use-after-free condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALSA-2025_16880
ALT-PU-2024-14046
AZL-42246
BDU:2024-04577
CVE-2023-52760
DLA-4008-1
DSA-5731-1
USN-6972-1
USN-6972-2
USN-6972-3
USN-6972-4
USN-6973-1
USN-6973-2
USN-6973-3
USN-6973-4
USN-6974-1
USN-6974-2
USN-6976-1
USN-7006-1
USN-7019-1

Produtos afetados

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu