PT-2024-14734 · Linux+2 · Linux Kernel+2

Syzbot · Published 2023-09-12 · Updated 2026-03-13 · CVE-2023-52770

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.12/6.6.2

Description A vulnerability in the Linux kernel's f2fs component can cause a null pointer dereference, leading to a panic. This issue occurs when a file with a compressed flag is created, compression is disabled, and the extent cache is updated. The vulnerability can be triggered by calling creat(), ioctl(F2FS IOC SET PIN FILE), and fallocate(2097152 * N) in sequence. Technical details include a null pointer dereference in instrument atomic read write, atomic try cmpxchg acquire, queued write lock, raw write lock, and raw write lock.

Recommendations To resolve this issue, upgrade the Linux kernel to version 6.5.12/6.6.2 or later. As a temporary workaround, consider disabling the f2fs component or restricting its use until a patch is available. Avoid using the fallocate function with large values, as this can trigger the vulnerability. Additionally, be cautious when creating files with compressed flags and subsequently disabling compression.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-15385

CVE-2023-52770

ECHO-68D9-9F92-199D

Affected Products

Astra Linux

Debian

Linux Kernel

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52770.json · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-52770 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52770 · Security Note
• https://git.kernel.org/stable/c/d83309e7e006cee8afca83523559017c824fbf7a · Patch
• https://osv.dev/vulnerability/CVE-2023-52770 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-52770 · Vendor Advisory
• https://git.kernel.org/stable/c/9de787139b0258a5dd1f498780c26d76b61d2958 · Patch
• https://git.kernel.org/stable/c/f803982190f0265fd36cf84670aa6daefc2b0768 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-52770 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2023-52770 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15385 · Security Note
• https://ubuntu.com/security/CVE-2023-52770 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2023-52770 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-52770 · Security Note
• https://t.me/cvenotify/106466 · Telegram Post