CVE-2023-52799

jfs: fix array-index-out-of-bounds in dbFindLeaf

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in dbFindLeaf

Currently while searching for dmtree_t for sufficient free blocks there is an array out of bounds while getting element in tp->dm_stree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 20f9310a18e3e99fc031e036fcbed67105ae1859Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 86df90f3fea7c5591f05c8a0010871d435e83046Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ecfb47f13b08b02cf28b7b50d4941eefa21954d2Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81aa58cd8495b8c3b527f58ccbe19478d8087f61Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a50b796d36719757526ee094c703378895ab5e67Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 88b7894a8f8705bf4e7ea90b10229376abf14514Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 87c681ab49e99039ff2dd3e71852417381b13878Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 22cad8bc1d36547cdae0eef316c47d917ce3147cAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.14.331 through 4.14.Not affected 4.19.300 through 4.19.Not affected 5.4.262 through 5.4.Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 20f9310a18e3e99fc031e036fcbed67105ae1859Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 86df90f3fea7c5591f05c8a0010871d435e83046Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before ecfb47f13b08b02cf28b7b50d4941eefa21954d2Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 81aa58cd8495b8c3b527f58ccbe19478d8087f61Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a50b796d36719757526ee094c703378895ab5e67Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 88b7894a8f8705bf4e7ea90b10229376abf14514Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 87c681ab49e99039ff2dd3e71852417381b13878Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 22cad8bc1d36547cdae0eef316c47d917ce3147cAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.14.331 through 4.14.*Not affected
4.19.300 through 4.19.*Not affected
5.4.262 through 5.4.*Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.