CVE-2023-52805

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds in diAlloc

Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-129

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2308d0fb0dc32446b4e6ca37cd09c30374bb64e9; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cf7e3e84df36a9953796c737f080712f631d7083; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7467ca10a5ff09b0e87edf6c4d2a4bfdee69cf2c; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1ba7df5457dc1c1071c5f92ac11323533a6430e1; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 64f062baf202b82f54987a3f614a6c8f3e466641; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8c68af2af697ba2ba3b138be0c6d72e2ce3a3d6d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 665b44e55c2767a4f899c3b18f49e9e1c9983777; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1708d0a9917fea579cc9da3d87b154285abd2cd8; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 05d9ea1ceb62a55af6727a69269a4fd310edf483
LinuxLinux2.6.12

References

Timeline

Published
May 21, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-528065.5In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: Fix possible null-ptr-deref when assigning a stream While ACVE-2023-528077.8In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix out-of-bounds access may occur when coalesce info is reaCVE-2023-528085.5In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs CVE-2023-528095.5In the Linux kernel, the following vulnerability has been resolved: scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setCVE-2023-52819.8A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part ofCVE-2023-528107.8In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative db_l2nbperpage l2nbperpage is log2(numbCVE-2023-528115.5In the Linux kernel, the following vulnerability has been resolved: scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool In pracCVE-2023-528127.8In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV envCVE-2023-528135.5In the Linux kernel, the following vulnerability has been resolved: crypto: pcrypt - Fix hungtask for PADATA_RESET We found a hungtask bugCVE-2023-528145.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix potential null pointer derefernce The amdgpu_ras_get_cCVE-2023-528155.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vkms: fix a possible null pointer dereference In amdgpu_vkmCVE-2023-528167.8In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix shift out-of-bounds issue [ 567.613292] shift exponen