In the Linux kernel, the following vulnerability has been resolved:
fs: hfsplus: remove WARNON() from hfspluscat_{read,write}_inode()
syzbot is hitting WARNON() in hfspluscat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53683.json",
"cna_assigner": "Linux"
}[
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8daee66585897a4c90d937c91e762100237bff9",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-0d9821c1"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48960a503fcec76d3f72347b7e679dda08ca43be",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-20f48d21"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a9d68d84b2e41ba3f2a727b36f035fad6800492",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533",
"315022918918325057463618292342958795231",
"186916056590752444053050917816151574439"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-22832843"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61af77acd039ffd221bf7adf0dc95d0a4d377505",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2202.0,
"function_hash": "157584803167106388575538071853330044383"
},
"signature_version": "v1",
"id": "CVE-2023-53683-2d9c69af"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37cab61a52d6f42b2d961c51bcf369f09e235fb5",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-31c161a9"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2280.0,
"function_hash": "129622288118055391771875854316882247035"
},
"signature_version": "v1",
"id": "CVE-2023-53683-5466e6a0"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61af77acd039ffd221bf7adf0dc95d0a4d377505",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-66698edc"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c074913b12db3632b11588b31bbfb0fa80a0a1c9",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-73b8b078"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48960a503fcec76d3f72347b7e679dda08ca43be",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2202.0,
"function_hash": "157584803167106388575538071853330044383"
},
"signature_version": "v1",
"id": "CVE-2023-53683-75a1820b"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c074913b12db3632b11588b31bbfb0fa80a0a1c9",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2280.0,
"function_hash": "129622288118055391771875854316882247035"
},
"signature_version": "v1",
"id": "CVE-2023-53683-75f56224"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37cab61a52d6f42b2d961c51bcf369f09e235fb5",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533",
"315022918918325057463618292342958795231",
"186916056590752444053050917816151574439"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-76061384"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2202.0,
"function_hash": "157584803167106388575538071853330044383"
},
"signature_version": "v1",
"id": "CVE-2023-53683-9475f36f"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-ac75ee1e"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8daee66585897a4c90d937c91e762100237bff9",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-be3d6ff8"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c074913b12db3632b11588b31bbfb0fa80a0a1c9",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-c3728623"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@37cab61a52d6f42b2d961c51bcf369f09e235fb5",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2202.0,
"function_hash": "157584803167106388575538071853330044383"
},
"signature_version": "v1",
"id": "CVE-2023-53683-c4f98740"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a9d68d84b2e41ba3f2a727b36f035fad6800492",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-c63ef5b8"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@3a9d68d84b2e41ba3f2a727b36f035fad6800492",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2202.0,
"function_hash": "157584803167106388575538071853330044383"
},
"signature_version": "v1",
"id": "CVE-2023-53683-de032dbd"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-e5ba1d93"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81b21c0f0138ff5a499eafc3eb0578ad2a99622c",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533",
"315022918918325057463618292342958795231",
"186916056590752444053050917816151574439"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-ea2f6ff2"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a75d9211a07fed513c08c5d4861c4a36ac6a74fe",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-f8c1eed9"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@61af77acd039ffd221bf7adf0dc95d0a4d377505",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_write_inode"
},
"digest": {
"length": 2054.0,
"function_hash": "83582033475298471863092889225171576689"
},
"signature_version": "v1",
"id": "CVE-2023-53683-f8ef5b75"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@48960a503fcec76d3f72347b7e679dda08ca43be",
"deprecated": false,
"signature_type": "Line",
"target": {
"file": "fs/hfsplus/inode.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"339189692809247665903846268824948493426",
"220518010349324462001957191071834821660",
"130875930944975610620692162636293411789",
"330718650962326666512513126428674022717",
"64428351377318170371245362138713719066",
"291767492323511691103846186120295717473",
"192534501697622284546959699840139612994",
"42316175457227352056858296177970656482",
"94011990109488033819525579385782154533",
"250727278517910643251549169613337782893",
"65607542979758829494236428680130430100",
"121918544208632062162391328221087318364",
"76971894304037035648686499507071910117",
"40528614710450286880297578967636079517",
"259773070196998731241231409750812263798",
"227347221098802996876550917915219010254",
"24135162769182285788970959664646417072",
"5175347376000168190761573384094076364",
"81192128159139875899797737354393844196",
"276755035027032156645290682805484378625",
"339626884432802857957511982704279282757",
"101315339540314517993977302146408335219",
"333896501567785386005024517814043092281",
"312313435801939866814753463521706778237",
"329123031579892881223125619693487534345",
"54083229229056550736400936127821949533",
"315022918918325057463618292342958795231",
"186916056590752444053050917816151574439"
]
},
"signature_version": "v1",
"id": "CVE-2023-53683-feb369a4"
},
{
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8daee66585897a4c90d937c91e762100237bff9",
"deprecated": false,
"signature_type": "Function",
"target": {
"file": "fs/hfsplus/inode.c",
"function": "hfsplus_cat_read_inode"
},
"digest": {
"length": 2202.0,
"function_hash": "157584803167106388575538071853330044383"
},
"signature_version": "v1",
"id": "CVE-2023-53683-ff0ed58c"
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2023-53683.json"