CVE-2023-52805

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Improper Validation of Array Index pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.

Rincian

Terbit di NVD

21 Mei 2024

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-129: Improper Validation of Array Index

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 15,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/05d9ea1ceb62a55af6727a69269a4fd310edf483 patch
• https://git.kernel.org/stable/c/1708d0a9917fea579cc9da3d87b154285abd2cd8 patch
• https://git.kernel.org/stable/c/1ba7df5457dc1c1071c5f92ac11323533a6430e1 patch
• https://git.kernel.org/stable/c/2308d0fb0dc32446b4e6ca37cd09c30374bb64e9 patch
• https://git.kernel.org/stable/c/64f062baf202b82f54987a3f614a6c8f3e466641 patch
• https://git.kernel.org/stable/c/665b44e55c2767a4f899c3b18f49e9e1c9983777 patch
• https://git.kernel.org/stable/c/7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c patch
• https://git.kernel.org/stable/c/8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d patch
• https://git.kernel.org/stable/c/cf7e3e84df36a9953796c737f080712f631d7083 patch