CVE-2023-52979

In the Linux kernel, the following vulnerability has been resolved:

squashfs: harden sanity check in squashfsreadxattridtable

While mounting a corrupted filesystem, a signed integer '*xattrids' can become less than zero. This leads to the incorrect computation of 'len' and 'indexes' values which can cause null-ptr-deref in copybiotoactor() or out-of-bounds accesses in the next sanity checks inside squashfsreadxattridtable().

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.