CVE - CVE-2023-52566

CVE-ID
CVE-2023-52566	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nilfs_dat_translate() fails. If the reference count hits 0 and its owner page gets unlocked, bh may be freed. However, bh->b_page is dereferenced to put the page after that, which may result in a use-after-free bug. This patch moves the release operation after unlocking and putting the page. NOTE: The function in question is only called in GC, and in combination with current userland tools, address translation using DAT does not occur in that function, so the code path that causes this issue will not be executed. However, it is possible to run that code path by intentionally modifying the userland GC library or by calling the GC ioctl directly. [konishi.ryusuke@gmail.com: NOTE added to the commit log]
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/193b5a1c6c67c36b430989dc063fe7ea4e200a33 URL:https://git.kernel.org/stable/c/193b5a1c6c67c36b430989dc063fe7ea4e200a33 MISC:https://git.kernel.org/stable/c/28df4646ad8b433340772edc90ca709cdefc53e2 URL:https://git.kernel.org/stable/c/28df4646ad8b433340772edc90ca709cdefc53e2 MISC:https://git.kernel.org/stable/c/3936e8714907cd55e37c7cc50e50229e4a9042e8 URL:https://git.kernel.org/stable/c/3936e8714907cd55e37c7cc50e50229e4a9042e8 MISC:https://git.kernel.org/stable/c/7130a87ca32396eb9bf48b71a2d42259ae44c6c7 URL:https://git.kernel.org/stable/c/7130a87ca32396eb9bf48b71a2d42259ae44c6c7 MISC:https://git.kernel.org/stable/c/7ee29facd8a9c5a26079148e36bcf07141b3a6bc URL:https://git.kernel.org/stable/c/7ee29facd8a9c5a26079148e36bcf07141b3a6bc MISC:https://git.kernel.org/stable/c/980663f1d189eedafd18d80053d9cf3e2ceb5c8c URL:https://git.kernel.org/stable/c/980663f1d189eedafd18d80053d9cf3e2ceb5c8c MISC:https://git.kernel.org/stable/c/bb61224f6abc8e71bfdf06d7c984e23460875f5b URL:https://git.kernel.org/stable/c/bb61224f6abc8e71bfdf06d7c984e23460875f5b MISC:https://git.kernel.org/stable/c/fb1084e63ee56958b0a56e17a50a4fd86445b9c1 URL:https://git.kernel.org/stable/c/fb1084e63ee56958b0a56e17a50a4fd86445b9c1
Assigning CNA
kernel.org
Date Record Created
20240302	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240302)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)