PT-2024-14644 · Linux+6 · Linux Kernel+6
Syzbot
·
Published
2024-01-02
·
Updated
2025-09-29
·
CVE-2023-52599
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.7.0
Description
The issue is related to an array-index-out-of-bounds error in the
diNewExt function in the JFS file system. When the agstart value is too large, it can cause an agno overflow. This error is detected by the UBSAN (Undefined Behavior Sanitizer) tool. The error occurs in the fs/jfs/jfs imap.c file at line 2360. The fix involves checking the validity of the agno value after it is obtained and exiting the subsequent process if the value is invalid.Recommendations
To resolve this issue, update the Linux kernel to a version that includes the fix for the array-index-out-of-bounds error in the
diNewExt function. As a temporary workaround, consider disabling the jfs file system until a patched version of the kernel is available.Exploit
Fix
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu