CVE-2023-52600

Source
https://cve.org/CVERecord?id=CVE-2023-52600
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52600.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2023-52600
Downstream
Related
Published
2024-03-06T06:45:28.198Z
Modified
2026-04-11T12:46:33.495709Z
Summary
jfs: fix uaf in jfs_evict_inode
Details

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix uaf in jfsevictinode

When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcucore() calls jfsfree_node().

Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52600.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Fixed
81b4249ef37297fb17ba102a524039a05c6c5d35
Fixed
93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5f
Fixed
bc6ef64dbe71136f327d63b2b9071b828af2c2a8
Fixed
8e44dc3f96e903815dab1d74fff8faafdc6feb61
Fixed
32e8f2d95528d45828c613417cb2827d866cbdce
Fixed
1696d6d7d4a1b373e96428d0fe1166bd7c3c795e
Fixed
bacdaa04251382d7efd4f09f9a0686bfcc297e2e
Fixed
e0e1958f4c365e380b17ccb35617345b31ef7bf3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52600.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.12
Fixed
4.19.307
Type
ECOSYSTEM
Events
Introduced
4.20.0
Fixed
5.4.269
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.210
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.149
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.77
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.16
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.7.4

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-52600.json"