PT-2023-9197 · Linux+6 · Linux Kernel+6

Published

2023-11-06

·

Updated

2026-01-12

·

CVE-2023-52760

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The issue is related to a use-after-free vulnerability in the gfs2 file system, specifically in the gfs2 put super() function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The problem arises when the quota is not properly cleaned up by gfs2 quota cleanup(), leading to the freeing of struct gfs2 sbd before the gfs2 qd dealloc callback has run for all gfs2 quota data objects, resulting in a use-after-free condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880
ALT-PU-2024-14046
AZL-42246
BDU:2024-04577
CVE-2023-52760
DLA-4008-1
DSA-5731-1
USN-6972-1
USN-6972-2
USN-6972-3
USN-6972-4
USN-6973-1
USN-6973-2
USN-6973-3
USN-6973-4
USN-6974-1
USN-6974-2
USN-6976-1
USN-7006-1
USN-7019-1

Affected Products

Alt Linux
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu