From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-1.web.codeaurora.org [10.30.226.201]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id CB001144D2B for ; Tue, 21 May 2024 15:36:10 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=10.30.226.201 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716305770; cv=none; b=VRLSf0CQvX26L/paleCtJeyxz8fj8D7HBSSnYiIdkQFk+CoKaYTgaqmHNUCRVbdkDKEoJRBgfPZqdbth5e3g8jX/avfDsw41evV0ZFGciXMoQY2+oitrUjgaIM6AusovBZ/HMOuC8EEXwHQwihnowvL7IGxUNCnlziROE4Cwy+E= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1716305770; c=relaxed/simple; bh=d+ROJSTSz/fm5kNoc1WIT8++BfHV9OWRbkc4p7m+trs=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=nML5RhwseyDjr1BS89PudUM8LXE3H6f7Kq+eqN+gPIymkTekiRcKFRaOYCCQrmZ3AmikuTzhZErhS5rpyb/YrIA5KtZNVZsMqiCq2b8S06mLYNVZ+LMXCNP3nAA0bhdb1jcqeSvHwomgN/u5lgZFDOkrZIPzNgZaOQGt2Ek7xwo= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b=MldQuWX4; arc=none smtp.client-ip=10.30.226.201 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=linuxfoundation.org header.i=@linuxfoundation.org header.b="MldQuWX4" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 188F8C2BD11; Tue, 21 May 2024 15:36:09 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=linuxfoundation.org; s=korg; t=1716305770; bh=d+ROJSTSz/fm5kNoc1WIT8++BfHV9OWRbkc4p7m+trs=; h=From:To:Cc:Subject:Date:Reply-to:From; b=MldQuWX4OmmIiqxmhIjHum0wppDLSCDZWLb1fenMaxuriFUnKOqkXq36Ymj1QjqPr jqItrKBGUVLk6pTab7RtRoXMWfc5bazzzxDvZt/06c0auTvl3bHph2Q+nJ1AlNgpCt YTUM90rW42lfg8BhHuktU+6SL/wpghPidQppfJYs= From: Greg Kroah-Hartman To: linux-cve-announce@vger.kernel.org Cc: Greg Kroah-Hartman Subject: CVE-2023-52799: jfs: fix array-index-out-of-bounds in dbFindLeaf Date: Tue, 21 May 2024 17:31:35 +0200 Message-ID: <2024052159-CVE-2023-52799-c335@gregkh> X-Mailer: git-send-email 2.45.1 Precedence: bulk X-Mailing-List: linux-cve-announce@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Reply-to: , X-Developer-Signature: v=1; a=openpgp-sha256; l=2718; i=gregkh@linuxfoundation.org; h=from:subject:message-id; bh=d+ROJSTSz/fm5kNoc1WIT8++BfHV9OWRbkc4p7m+trs=; b=owGbwMvMwCRo6H6F97bub03G02pJDGk++4xzkiS+qZcdP6CxXeevuMqG6so6nsTvTJv1ZB7JH Sm/dWFRRywLgyATg6yYIsuXbTxH91ccUvQytD0NM4eVCWQIAxenAEzkRzrD/CrPVU+1nCbw2NWk q73z99E8ET/7O8N8p0MmLlz2XCEHuWVLejimntwsxrwEAA== X-Developer-Key: i=gregkh@linuxfoundation.org; a=openpgp; fpr=F4B60CC5BF78C2214A313DCB3147D40DDB2DFB29 Content-Transfer-Encoding: 8bit Description =========== In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in dbFindLeaf Currently while searching for dmtree_t for sufficient free blocks there is an array out of bounds while getting element in tp->dm_stree. To add the required check for out of bound we first need to determine the type of dmtree. Thus added an extra parameter to dbFindLeaf so that the type of tree can be determined and the required check can be applied. The Linux kernel CVE team has assigned CVE-2023-52799 to this issue. Affected and fixed versions =========================== Fixed in 4.14.331 with commit 20f9310a18e3 Fixed in 4.19.300 with commit 86df90f3fea7 Fixed in 5.4.262 with commit ecfb47f13b08 Fixed in 5.10.202 with commit 81aa58cd8495 Fixed in 5.15.140 with commit da3da5e1e6f7 Fixed in 6.1.64 with commit a50b796d3671 Fixed in 6.5.13 with commit 88b7894a8f87 Fixed in 6.6.3 with commit 87c681ab49e9 Fixed in 6.7 with commit 22cad8bc1d36 Please see https://www.kernel.org for a full list of currently supported kernel versions by the kernel community. Unaffected versions might change over time as fixes are backported to older supported kernel versions. The official CVE entry at https://cve.org/CVERecord/?id=CVE-2023-52799 will be updated if fixes are backported, please check that for the most up to date information about this issue. Affected files ============== The file(s) affected by this issue are: fs/jfs/jfs_dmap.c Mitigation ========== The Linux kernel CVE team recommends that you update to the latest stable kernel version for this, and many other bugfixes. Individual changes are never tested alone, but rather are part of a larger kernel release. Cherry-picking individual commits is not recommended or supported by the Linux kernel community at all. If however, updating to the latest release is impossible, the individual changes to resolve this issue can be found at these commits: https://git.kernel.org/stable/c/20f9310a18e3e99fc031e036fcbed67105ae1859 https://git.kernel.org/stable/c/86df90f3fea7c5591f05c8a0010871d435e83046 https://git.kernel.org/stable/c/ecfb47f13b08b02cf28b7b50d4941eefa21954d2 https://git.kernel.org/stable/c/81aa58cd8495b8c3b527f58ccbe19478d8087f61 https://git.kernel.org/stable/c/da3da5e1e6f71c21d8e6149d7076d936ef5d4cb9 https://git.kernel.org/stable/c/a50b796d36719757526ee094c703378895ab5e67 https://git.kernel.org/stable/c/88b7894a8f8705bf4e7ea90b10229376abf14514 https://git.kernel.org/stable/c/87c681ab49e99039ff2dd3e71852417381b13878 https://git.kernel.org/stable/c/22cad8bc1d36547cdae0eef316c47d917ce3147c