CVE-2023-52805

jfs: fix array-index-out-of-bounds in diAlloc

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in diAlloc

Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-129 Improper Validation of Array Index

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2308d0fb0dc32446b4e6ca37cd09c30374bb64e9Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cf7e3e84df36a9953796c737f080712f631d7083Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2cAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ba7df5457dc1c1071c5f92ac11323533a6430e1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 64f062baf202b82f54987a3f614a6c8f3e466641Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6dAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 665b44e55c2767a4f899c3b18f49e9e1c9983777Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1708d0a9917fea579cc9da3d87b154285abd2cd8Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 05d9ea1ceb62a55af6727a69269a4fd310edf483Affected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.14.331 through 4.14.Not affected 4.19.300 through 4.19.Not affected 5.4.262 through 5.4.Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2308d0fb0dc32446b4e6ca37cd09c30374bb64e9Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cf7e3e84df36a9953796c737f080712f631d7083Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2cAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1ba7df5457dc1c1071c5f92ac11323533a6430e1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 64f062baf202b82f54987a3f614a6c8f3e466641Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6dAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 665b44e55c2767a4f899c3b18f49e9e1c9983777Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1708d0a9917fea579cc9da3d87b154285abd2cd8Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 05d9ea1ceb62a55af6727a69269a4fd310edf483Affected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.14.331 through 4.14.*Not affected
4.19.300 through 4.19.*Not affected
5.4.262 through 5.4.*Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.