CVE-2023-52600

jfs: fix uaf in jfs_evict_inode

State: Published
Severity: 7.8 High
Published: Mar 6, 2024
Updated: Aug 5, 2026
Reserved: Mar 2, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix uaf in jfs_evict_inode

When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls jfs_free_node().

Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81b4249ef37297fb17ba102a524039a05c6c5d35Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bc6ef64dbe71136f327d63b2b9071b828af2c2a8Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8e44dc3f96e903815dab1d74fff8faafdc6feb61Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 32e8f2d95528d45828c613417cb2827d866cbdceAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1696d6d7d4a1b373e96428d0fe1166bd7c3c795eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bacdaa04251382d7efd4f09f9a0686bfcc297e2eAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e0e1958f4c365e380b17ccb35617345b31ef7bf3Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.19.307 through 4.19.Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.77 through 6.1.Not affected 6.6.16 through 6.6.Not affected 6.7.4 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81b4249ef37297fb17ba102a524039a05c6c5d35Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 93df0a2a0b3cde2d7ab3a52ed46ea1d6d4aaba5fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bc6ef64dbe71136f327d63b2b9071b828af2c2a8Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8e44dc3f96e903815dab1d74fff8faafdc6feb61Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 32e8f2d95528d45828c613417cb2827d866cbdceAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1696d6d7d4a1b373e96428d0fe1166bd7c3c795eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bacdaa04251382d7efd4f09f9a0686bfcc297e2eAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before e0e1958f4c365e380b17ccb35617345b31ef7bf3Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.19.307 through 4.19.*Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.77 through 6.1.*Not affected
6.6.16 through 6.6.*Not affected
6.7.4 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.