In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Add validity check for dbmaxag and dbagpref
Both dbmaxag and dbagpref are used as the index of the dbagfree array, but there is currently no validity check for dbmaxag and db_agpref, which can lead to errors.
The following is related bug reported by Syzbot:
UBSAN: array-index-out-of-bounds in fs/jfs/jfsdmap.c:639:20 index 7936 is out of range for type 'atomict[128]'
Add checking that the values of dbmaxag and dbagpref are valid indexes for the db_agfree array.
{ "vanir_signatures": [ { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-33203a6a", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2323de34a3ae61a9f9b544c18583f71cea86721f", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-3af3cee9", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32bd8f1cbcf8b663e29dd1f908ba3a129541a11b", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-3bd13ee8", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f74d336990f37703a8eee77153463d65b67f70e", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-483833d7", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6c8863fb3f57700ab583d875adda04caaf2278a", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-528829bd", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0649e2dd4a3595b5595a29d0064d047c2fae2fb", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-551641b6", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c6c8863fb3f57700ab583d875adda04caaf2278a", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-5ce85b8a", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce15b0f1a431168f07b1cc6c9f71206a2db5c809", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-5d60cf89", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a0649e2dd4a3595b5595a29d0064d047c2fae2fb", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-7163e71f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce15b0f1a431168f07b1cc6c9f71206a2db5c809", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-77f09931", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1f74d336990f37703a8eee77153463d65b67f70e", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-7a5cdef3", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5013f8269887642cca784adc8db9b5f0b771533f", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-acb372be", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5013f8269887642cca784adc8db9b5f0b771533f", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-b79bd9ef", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dca403bb035a565bb98ecc1dda5d30f676feda40", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-bee2e0de", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64933ab7b04881c6c18b21ff206c12278341c72e", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-cc86bcad", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dca403bb035a565bb98ecc1dda5d30f676feda40", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Function", "digest": { "length": 1937.0, "function_hash": "206849916833819198927277892468200930956" }, "deprecated": false, "id": "CVE-2023-52804-cffd5a9f", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2323de34a3ae61a9f9b544c18583f71cea86721f", "signature_version": "v1", "target": { "function": "dbMount", "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-d1bcee29", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@32bd8f1cbcf8b663e29dd1f908ba3a129541a11b", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } }, { "signature_type": "Line", "digest": { "threshold": 0.9, "line_hashes": [ "18564641095850081107946448153904634440", "192465900955299737757090456837024530734", "268110968898883667212676654538942252670", "315851752469155505462066383439169023596" ] }, "deprecated": false, "id": "CVE-2023-52804-fadb4585", "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@64933ab7b04881c6c18b21ff206c12278341c72e", "signature_version": "v1", "target": { "file": "fs/jfs/jfs_dmap.c" } } ] }