PT-2023-9831 · Linux+6 · Linux Kernel+6

Published 2023-11-21 · Updated 2025-09-29 · CVE-2023-52600

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the jfs evict inode function of the Linux kernel's jfs file system. When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu core() calls jfs free node(). This could allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025_16880

ALT-PU-2024-3457

BDU:2025-00163

CVE-2023-52600

DLA-3840-1

DLA-3842-1

DSA-5658-1

DSA-5681-1

OESA-2024-1353

OESA-2024-1355

OESA-2024-1356

OESA-2024-1357

OESA-2024-1392

OESA-2024-1393

OPENSUSE-SU-2024_1322-1

OPENSUSE-SU-2024_1322-2

OPENSUSE-SU-2024_1332-1

OPENSUSE-SU-2024_1332-2

OPENSUSE-SU-2024_1466-1

OPENSUSE-SU-2024_1480-1

OPENSUSE-SU-2024_1490-1

SUSE-SU-2024:1466-1

SUSE-SU-2024:1480-1

SUSE-SU-2024:1490-1

USN-6688-1

USN-6739-1

USN-6740-1

USN-6741-1

USN-6742-1

USN-6742-2

USN-6743-1

USN-6743-2

USN-6743-3

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 621

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52600.json · Exploit
• https://ubuntu.com/security/CVE-2021-46955 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-0639 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-52605 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46934 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52600 · Security Note
• https://osv.dev/vulnerability/USN-6743-3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-23307 · Security Note
• https://ubuntu.com/security/CVE-2022-20422 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-51779 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6741-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-46935 · Security Note
• https://ubuntu.com/security/CVE-2024-26600 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52502 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-52602 · Security Note