NetSight
IP …
high7.8

CVE-2023-52601

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Currently there is a bound check missing in…

Impact

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbAdjTree Currently there is a bound check missing in the dbAdjTree while accessing the dmt_stree. To add the required check added the bool is_ctl which is required to determine the size as suggest in the following commit. https://lore.kernel.org/linux-kernel-mentees/f9475918-2186-49b8-b801-6f0f9e75f4fa@oracle.com/

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 4.19.307
from 4.20 before 5.4.269
from 5.5 before 5.10.210
from 5.11 before 5.15.149
from 5.16 before 6.1.77
from 6.2 before 6.6.16
DebianDebian Linux
Version 10.0

Weakness classification

CWE-129

References