In the Linux kernel, the following vulnerability has been resolved:
ext4: improve error handling from ext4_dirhash()
The ext4_dirhash() will almost never fail, especially when the hash tree feature was first introduced. However, with the addition of support of encrypted, casefolded file names, that function can most certainly fail today.
So make sure the callers of ext4_dirhash() properly check for failures, and reflect the errors back up to their callers.
[
{
"digest": {
"length": 852.0,
"function_hash": "66329919969430896822696264735620007648"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_make_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-028ac58e",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 3139.0,
"function_hash": "74627376207162351946178426531942698204"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "make_indexed_dir"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-0d8b84cd",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 852.0,
"function_hash": "66329919969430896822696264735620007648"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_make_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-0da4d2cc",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"24467398977952547429086352181011027659",
"182833169583699186125489794714891184921",
"190093619879895620863182373275515927985",
"96605700849681281112417749971502501475"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/hash.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-0eb11942",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 3898.0,
"function_hash": "34281756398156232192060723525603119266"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_probe"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-12da27ac",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"70560658284582490618707061429370086264",
"233124521147098681222549178205215103033",
"15610266712741944094699000571730256927",
"289384652907145131188353464363097984973",
"307626804541211094185437604482688599815",
"191628863198881091536757380975668348651",
"197133992746451625222606066140534694721",
"60694216651997525279252881866977246178",
"108946575767496659136746361956236039058",
"181812860069416422615462331555719971496",
"166329867036813306099589219274805146270",
"232709518515597160425727445963685896713",
"271364367171622346745762778585211146192",
"270686592822243159072083490234668511571",
"190347998819397529911929454820444734782",
"315399669162326292308402480500362070721",
"182508326892180781735061653836348153124",
"318740409887040288760486805037183031033",
"271358135909624630647952918296812844923",
"84160548082393901283715804759908812142",
"273021836652900913657450761981128441855",
"18891832200312117780112674307165283533",
"308411346326644263121292841021297742761",
"334896152516560616520250477633170139000",
"54631516230183819108276206897943636154",
"136980669055354129091690186069357754143",
"325626299465364197277118647307647535561",
"85864726942146341081674581249961939044",
"306102627645201612824906129207690977452",
"8243577801184519531649640963165889585",
"76641597623614599007192643760034927982",
"159434458258718596858807016993409347788",
"150601420656775905147876739678766404619",
"103021329720680863473634393103271320307",
"60189289627679284610236047521573311996",
"256526746251101313620537236528977733099",
"146781770877967785643936167715288225575",
"28440669888576218255855542228188935964",
"30054374066688257589518103926497736888",
"168118254126272929418419167510567758779"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/namei.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-25006078",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"24467398977952547429086352181011027659",
"182833169583699186125489794714891184921",
"190093619879895620863182373275515927985",
"96605700849681281112417749971502501475"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/hash.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-2919ad45",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 2075.0,
"function_hash": "277255868318619304507187554293262782328"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "htree_dirblock_to_tree"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-2ad19755",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"70560658284582490618707061429370086264",
"233124521147098681222549178205215103033",
"15610266712741944094699000571730256927",
"289384652907145131188353464363097984973",
"307626804541211094185437604482688599815",
"191628863198881091536757380975668348651",
"197133992746451625222606066140534694721",
"60694216651997525279252881866977246178",
"108946575767496659136746361956236039058",
"181812860069416422615462331555719971496",
"166329867036813306099589219274805146270",
"232709518515597160425727445963685896713",
"271364367171622346745762778585211146192",
"270686592822243159072083490234668511571",
"190347998819397529911929454820444734782",
"315399669162326292308402480500362070721",
"182508326892180781735061653836348153124",
"318740409887040288760486805037183031033",
"271358135909624630647952918296812844923",
"84160548082393901283715804759908812142",
"273021836652900913657450761981128441855",
"18891832200312117780112674307165283533",
"308411346326644263121292841021297742761",
"334896152516560616520250477633170139000",
"54631516230183819108276206897943636154",
"136980669055354129091690186069357754143",
"325626299465364197277118647307647535561",
"85864726942146341081674581249961939044",
"306102627645201612824906129207690977452",
"8243577801184519531649640963165889585",
"76641597623614599007192643760034927982",
"159434458258718596858807016993409347788",
"150601420656775905147876739678766404619",
"103021329720680863473634393103271320307",
"60189289627679284610236047521573311996",
"256526746251101313620537236528977733099",
"146781770877967785643936167715288225575",
"28440669888576218255855542228188935964",
"30054374066688257589518103926497736888",
"168118254126272929418419167510567758779"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/namei.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-410d9792",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 1712.0,
"function_hash": "207499707485037471240723439827038432675"
},
"target": {
"file": "fs/ext4/hash.c",
"function": "__ext4fs_dirhash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-43834f1d",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 837.0,
"function_hash": "104745141346830460665709909404895791896"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "ext4_fname_setup_ci_filename"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-4a67bab8",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"70560658284582490618707061429370086264",
"233124521147098681222549178205215103033",
"15610266712741944094699000571730256927",
"289384652907145131188353464363097984973",
"307626804541211094185437604482688599815",
"191628863198881091536757380975668348651",
"197133992746451625222606066140534694721",
"60694216651997525279252881866977246178",
"108946575767496659136746361956236039058",
"181812860069416422615462331555719971496",
"166329867036813306099589219274805146270",
"232709518515597160425727445963685896713",
"271364367171622346745762778585211146192",
"270686592822243159072083490234668511571",
"190347998819397529911929454820444734782",
"315399669162326292308402480500362070721",
"182508326892180781735061653836348153124",
"318740409887040288760486805037183031033",
"271358135909624630647952918296812844923",
"84160548082393901283715804759908812142",
"273021836652900913657450761981128441855",
"18891832200312117780112674307165283533",
"308411346326644263121292841021297742761",
"334896152516560616520250477633170139000",
"54631516230183819108276206897943636154",
"136980669055354129091690186069357754143",
"325626299465364197277118647307647535561",
"85864726942146341081674581249961939044",
"306102627645201612824906129207690977452",
"8243577801184519531649640963165889585",
"76641597623614599007192643760034927982",
"159434458258718596858807016993409347788",
"150601420656775905147876739678766404619",
"103021329720680863473634393103271320307",
"60189289627679284610236047521573311996",
"256526746251101313620537236528977733099",
"146781770877967785643936167715288225575",
"28440669888576218255855542228188935964",
"30054374066688257589518103926497736888",
"168118254126272929418419167510567758779"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/namei.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-50e36c85",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 1712.0,
"function_hash": "207499707485037471240723439827038432675"
},
"target": {
"file": "fs/ext4/hash.c",
"function": "__ext4fs_dirhash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-58a364df",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 852.0,
"function_hash": "66329919969430896822696264735620007648"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_make_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-593935c8",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 1773.0,
"function_hash": "186844427848416600453907890554921431373"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_show_leaf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-5dfea1a6",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 1773.0,
"function_hash": "186844427848416600453907890554921431373"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_show_leaf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-602fb01a",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 1773.0,
"function_hash": "186844427848416600453907890554921431373"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_show_leaf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-6342fc22",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 837.0,
"function_hash": "104745141346830460665709909404895791896"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "ext4_fname_setup_ci_filename"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-7f7f20ea",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 1712.0,
"function_hash": "207499707485037471240723439827038432675"
},
"target": {
"file": "fs/ext4/hash.c",
"function": "__ext4fs_dirhash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-8e66cce2",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 3139.0,
"function_hash": "74627376207162351946178426531942698204"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "make_indexed_dir"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-97d1cca1",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 1773.0,
"function_hash": "186844427848416600453907890554921431373"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_show_leaf"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-a958e539",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"70560658284582490618707061429370086264",
"233124521147098681222549178205215103033",
"15610266712741944094699000571730256927",
"289384652907145131188353464363097984973",
"307626804541211094185437604482688599815",
"191628863198881091536757380975668348651",
"197133992746451625222606066140534694721",
"60694216651997525279252881866977246178",
"108946575767496659136746361956236039058",
"181812860069416422615462331555719971496",
"166329867036813306099589219274805146270",
"232709518515597160425727445963685896713",
"271364367171622346745762778585211146192",
"270686592822243159072083490234668511571",
"190347998819397529911929454820444734782",
"315399669162326292308402480500362070721",
"182508326892180781735061653836348153124",
"318740409887040288760486805037183031033",
"271358135909624630647952918296812844923",
"84160548082393901283715804759908812142",
"273021836652900913657450761981128441855",
"18891832200312117780112674307165283533",
"308411346326644263121292841021297742761",
"334896152516560616520250477633170139000",
"54631516230183819108276206897943636154",
"136980669055354129091690186069357754143",
"325626299465364197277118647307647535561",
"85864726942146341081674581249961939044",
"306102627645201612824906129207690977452",
"8243577801184519531649640963165889585",
"76641597623614599007192643760034927982",
"159434458258718596858807016993409347788",
"150601420656775905147876739678766404619",
"103021329720680863473634393103271320307",
"60189289627679284610236047521573311996",
"256526746251101313620537236528977733099",
"146781770877967785643936167715288225575",
"28440669888576218255855542228188935964",
"30054374066688257589518103926497736888",
"168118254126272929418419167510567758779"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/namei.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-aa77b528",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 2075.0,
"function_hash": "277255868318619304507187554293262782328"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "htree_dirblock_to_tree"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-b6e94026",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"24467398977952547429086352181011027659",
"182833169583699186125489794714891184921",
"190093619879895620863182373275515927985",
"96605700849681281112417749971502501475"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/hash.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-b7660d8a",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 2075.0,
"function_hash": "277255868318619304507187554293262782328"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "htree_dirblock_to_tree"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786",
"id": "CVE-2023-53473-c09832df",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 3898.0,
"function_hash": "34281756398156232192060723525603119266"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_probe"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-ced66158",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 852.0,
"function_hash": "66329919969430896822696264735620007648"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_make_map"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-d0a46bec",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 3139.0,
"function_hash": "74627376207162351946178426531942698204"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "make_indexed_dir"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-d57c1387",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 1712.0,
"function_hash": "207499707485037471240723439827038432675"
},
"target": {
"file": "fs/ext4/hash.c",
"function": "__ext4fs_dirhash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-d620b231",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 3898.0,
"function_hash": "34281756398156232192060723525603119266"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_probe"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c1fae027da61fe8e7eb99f7244297e81bc0f1e43",
"id": "CVE-2023-53473-dc8b8262",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 837.0,
"function_hash": "104745141346830460665709909404895791896"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "ext4_fname_setup_ci_filename"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-df90b8a9",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 837.0,
"function_hash": "104745141346830460665709909404895791896"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "ext4_fname_setup_ci_filename"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-e90def50",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 2075.0,
"function_hash": "277255868318619304507187554293262782328"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "htree_dirblock_to_tree"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-ef29ee7c",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"length": 3898.0,
"function_hash": "34281756398156232192060723525603119266"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "dx_probe"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-f6f16d83",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"24467398977952547429086352181011027659",
"182833169583699186125489794714891184921",
"190093619879895620863182373275515927985",
"96605700849681281112417749971502501475"
],
"threshold": 0.9
},
"target": {
"file": "fs/ext4/hash.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2531936118deb3f479c4fa1bcd787b74b8faa6a",
"id": "CVE-2023-53473-f9657713",
"signature_version": "v1",
"signature_type": "Line",
"deprecated": false
},
{
"digest": {
"length": 3139.0,
"function_hash": "74627376207162351946178426531942698204"
},
"target": {
"file": "fs/ext4/namei.c",
"function": "make_indexed_dir"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f68876aeef96ef8b708ab10b9cb47ce0a5adb424",
"id": "CVE-2023-53473-fcf4cc24",
"signature_version": "v1",
"signature_type": "Function",
"deprecated": false
}
]