PT-2024-14759 · Linux+3 · Linux Kernel+3
Syzbot
·
Published
2023-10-03
·
Updated
2025-09-23
·
CVE-2023-52804
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to the lack of validity checks for
db maxag and db agpref, which are used as indexes for the db agfree array. This can lead to errors, as reported by Syzbot with an array-index-out-of-bounds error in fs/jfs/jfs dmap.c. The error occurs because the index 7936 is out of range for the type atomic t[128]. To resolve this, a validity check has been added to ensure that the values of db maxag and db agpref are valid indexes for the db agfree array.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Improper Validation of Array Index
Improper Initialization
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linux Kernel
Red Os
Suse