PT-2024-14647 · Linux+6 · Linux Kernel+6
Published
2023-11-21
·
Updated
2025-09-29
·
CVE-2023-52604
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.0-rc3-syzkaller
Description
The issue is caused when the value of
lp becomes greater than CTLTREESIZE, which is the maximum size of stree. This results in an array-index-out-of-bounds error in the dbAdjTree function. The vulnerability was reported by Syzkaller and is identified by the error message "UBSAN: array-index-out-of-bounds in fs/jfs/jfs dmap.c:2867:6 index 196694 is out of range for type 's8[1365]' (aka 'signed char[1365]')".Recommendations
To resolve the issue, update the Linux kernel to a version that includes the patch for this vulnerability. If updating is not possible, consider adding a simple check to prevent the value of
lp from exceeding CTLTREESIZE. As a temporary workaround, consider using WARN ON ONCE for lack of a cleaner option, as modified by Dave in Osama's patch.Exploit
Fix
Improper Validation of Array Index
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu