PT-2023-9742 · Linux+1 · Linux Kernel+1

Syzbot · Published 2023-09-12 · Updated 2024-12-31 · CVE-2023-52848

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to the version that includes the fix for the f2fs reference count leak

Description The issue is related to a reference count leak in the f2fs component of the Linux kernel. During the f2fs put super() function, a sanity check is performed on the dirty and IO reference count of f2fs. If there is any reference count leak, it will trigger a panic. The root cause is that during f2fs put super(), if there is any IO error in f2fs wait on all pages(), the meta inode's page cache is not truncated later, resulting in a panic. This can be exploited to cause a denial of service.

Recommendations To resolve the issue, update the Linux kernel to a version that includes the fix for the f2fs reference count leak. As a temporary workaround, consider disabling the f2fs put super() function until a patch is available. Restrict access to the f2fs component to minimize the risk of exploitation. Avoid using the f2fs filesystem until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-10407

CVE-2023-52848

Affected Products

Linux Kernel

Red Os

References · 21

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52848.json · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52848 · Vendor Advisory
• https://git.kernel.org/stable/c/a4639380bbe66172df329f8b54aa7d2e943f0f64 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52848 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10407 · Security Note
• https://git.kernel.org/stable/c/eb42e1862aa7934c2c21890097ce4993c5e0d192 · Patch
• https://git.kernel.org/stable/c/10b2a6c0dade67b5a2b2d17fb75c457ea1985fad · Patch
• https://ubuntu.com/security/CVE-2023-52848 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52848 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-52848 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52848 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52848 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2023-52848 · Vendor Advisory
• https://redos.red-soft.ru/support/secure · Note
• https://git.kernel.org/linus/a4639380bbe66172df329f8b54aa7d2e943f0f64 · Note