CVE-2023-52602

jfs: fix slab-out-of-bounds Read in dtSearch

State: Published
Severity: 7.8 High
Published: Mar 6, 2024
Updated: Aug 5, 2026
Reserved: Mar 2, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix slab-out-of-bounds Read in dtSearch

Currently while searching for current page in the sorted entry table of the page there is a out of bound access. Added a bound check to fix the error.

Dave: Set return code to -EIO

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ce8bc22e948634a5c0a3fa58a179177d0e3f3950Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b9d6828589d57f94a23fb1c46112cda39d7efdbAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1c40ca3d39d769931b28295b3145c25f1decf5a6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6c6a96c3d74df185ee344977d46944d6f33bb4ddAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cab0c265ba182fd266c2aa3c69d7e40640a7f612Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7110650b85dd2f1cee819acd1345a9013a1a62f7Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bff9d4078a232c01e42e9377d005fb2f4d31a472Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa5492ee89463a7590a1449358002ff7ef63529fAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.19.307 through 4.19.Not affected 5.4.269 through 5.4.Not affected 5.10.210 through 5.10.Not affected 5.15.149 through 5.15.Not affected 6.1.77 through 6.1.Not affected 6.6.16 through 6.6.Not affected 6.7.4 through 6.7.*Not affected 6.8 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ce8bc22e948634a5c0a3fa58a179177d0e3f3950Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1b9d6828589d57f94a23fb1c46112cda39d7efdbAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1c40ca3d39d769931b28295b3145c25f1decf5a6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 6c6a96c3d74df185ee344977d46944d6f33bb4ddAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cab0c265ba182fd266c2aa3c69d7e40640a7f612Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7110650b85dd2f1cee819acd1345a9013a1a62f7Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before bff9d4078a232c01e42e9377d005fb2f4d31a472Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before fa5492ee89463a7590a1449358002ff7ef63529fAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.19.307 through 4.19.*Not affected
5.4.269 through 5.4.*Not affected
5.10.210 through 5.10.*Not affected
5.15.149 through 5.15.*Not affected
6.1.77 through 6.1.*Not affected
6.6.16 through 6.6.*Not affected
6.7.4 through 6.7.*Not affected
6.8 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.