CVE-2023-52810

fs/jfs: Add check for negative db_l2nbperpage

State: Published
Severity: 7.8 High
Published: May 21, 2024
Updated: Aug 5, 2026
Reserved: May 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fs/jfs: Add check for negative db_l2nbperpage

l2nbperpage is log2(number of blks per page), and the minimum legal value should be 0, not negative.

In the case of l2nbperpage being negative, an error will occur when subsequently used as shift exponent.

Syzbot reported this bug:

UBSAN: shift-out-of-bounds in fs/jfs/jfs_dmap.c:799:12 shift exponent -16777216 is negative

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-1335 Incorrect Bitwise Shift of Integer

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cc61fcf7d1c99f148fe8ddfb5c6ed0bb75861f01Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8f2964df6bfce9d92d81ca552010b8677af8d9dcAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a81a56b4cbe3142cc99f6b98e8f9b3a631c768e1Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 524b4f203afcf87accfe387e846f33f916f0c907Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5f148b16972e5f4592629b244d5109b15135f53fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0cb567e727339a192f9fd0db00781d73a91d15a6Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 491085258185ffc4fb91555b0dba895fe7656a45Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1a7c53fdea1d189087544d9a606d249e93c4934bAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 525b861a008143048535011f3816d407940f4bfaAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 4.14.331 through 4.14.Not affected 4.19.300 through 4.19.Not affected 5.4.262 through 5.4.Not affected 5.10.202 through 5.10.Not affected 5.15.140 through 5.15.Not affected 6.1.64 through 6.1.Not affected 6.5.13 through 6.5.Not affected 6.6.3 through 6.6.Not affected 6.7 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before cc61fcf7d1c99f148fe8ddfb5c6ed0bb75861f01Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 8f2964df6bfce9d92d81ca552010b8677af8d9dcAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a81a56b4cbe3142cc99f6b98e8f9b3a631c768e1Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 524b4f203afcf87accfe387e846f33f916f0c907Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5f148b16972e5f4592629b244d5109b15135f53fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 0cb567e727339a192f9fd0db00781d73a91d15a6Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 491085258185ffc4fb91555b0dba895fe7656a45Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1a7c53fdea1d189087544d9a606d249e93c4934bAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 525b861a008143048535011f3816d407940f4bfaAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
4.14.331 through 4.14.*Not affected
4.19.300 through 4.19.*Not affected
5.4.262 through 5.4.*Not affected
5.10.202 through 5.10.*Not affected
5.15.140 through 5.15.*Not affected
6.1.64 through 6.1.*Not affected
6.5.13 through 6.5.*Not affected
6.6.3 through 6.6.*Not affected
6.7 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.