NetSight
IP …
medium5.5

CVE-2023-53457

In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin may b…

Impact

In the Linux kernel, the following vulnerability has been resolved: FS: JFS: Fix null-ptr-deref Read in txBegin Syzkaller reported an issue where txBegin may be called on a superblock in a read-only mounted filesystem which leads to NULL pointer deref. This could be solved by checking if the filesystem is read-only before calling txBegin, and returning with appropiate error code.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.12.1 before 4.14.324
from 4.15 before 4.19.293
from 4.20 before 5.4.255
from 5.5 before 5.10.192
from 5.11 before 5.15.123
from 5.16 before 6.1.42

Weakness classification

CWE-476

References