PT-2025-40779 · Linux+2 · Linux Kernel+2
Published
2022-12-01
·
Updated
2025-12-04
·
CVE-2023-53616
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.1.0-rc7-syzkaller-00012-gca57f02295f1
Description
The Linux kernel contained a flaw within the JFS (Journaled File System) implementation related to an invalid memory free in the
diUnmount function. Specifically, the JFS IP(ipimap)->i imap structure was not being set to NULL after being freed, leading to a potential double-free condition if jfs remount() failed after freeing the memory. This issue was identified through fuzzing with syzbot. The double-free could occur if JFS IP(ipimap)->i imap was freed during a remount attempt but the subsequent diMount() operation failed.Recommendations
Update to Linux kernel version 6.1.0-rc7-syzkaller-00012-gca57f02295f1 or a later version that includes the fix.
Exploit
Fix
Buffer Overflow
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Jfs
Linux Kernel
Suse