NetSight
IP …
high7.8

CVE-2023-52436

In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-termi…

Impact

In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.306
from 4.20.0 before 5.4.268
from 5.5.0 before 5.10.209
from 5.11.0 before 5.15.148
from 5.16.0 before 6.1.74
from 6.2.0 before 6.6.13

References