PT-2023-8796 · Linux+4 · Linux Kernel+4

Published 2023-09-08 · Updated 2026-04-20 · CVE-2023-52569

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the btrfs component of the Linux kernel, where a vulnerability in the btrfs insert delayed dir index() function could lead to a denial of service. Instead of calling BUG() when a delayed dir index item fails to be inserted, the resources allocated are released and an error is returned to the caller. This change prevents hitting a BUG() but does not fix the underlying issue of attempting to use the same index number for different index items.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Assertion Failure

Allocation of Resources Without Limits

Weakness Enumeration

CWE-617

CWE-770

Related Identifiers

AZL-55779

BDU:2024-01936

CVE-2023-52569

OPENSUSE-SU-2024_0857-1

OPENSUSE-SU-2024_1321-1

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1490-1

SUSE-SU-2024:0856-1

SUSE-SU-2024:0857-1

SUSE-SU-2024:0926-1

SUSE-SU-2024:1320-1

SUSE-SU-2024:1321-1

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1490-1

Affected Products

Astra Linux

Debian

Linux Kernel

Red Os

Suse

References · 584

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52569.json · Exploit
• https://bdu.fstec.ru/vul/2024-01936 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52569 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52569 · Vendor Advisory
• https://git.kernel.org/stable/c/39c4a9522db0072570d602e9b365119e17fb9f4f · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52569 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52569 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2024:0926-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1321-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1466-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:1490-1 · Vendor Advisory
• https://git.kernel.org/stable/c/d10fd53393cc5de4b9cf1a4b8f9984f0a037aa51 · Patch
• https://osv.dev/vulnerability/SUSE-SU-2024:1480-1 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-55779 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2023-52569 · Vendor Advisory