Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2023-52566— nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()

AI Predicted 4.4 Difficulty: Theoretical EPSS 0.22% · P13

Possible ATT&CK Techniques 1AI

T1203 · Exploitation for Client Execution

Affected Version Matrix 18

VendorProductVersion RangeStatus
LinuxLinuxa3d93f709e893187d301aa5458b2248db9f22bd1< fb1084e63ee56958b0a56e17a50a4fd86445b9c1affected
a3d93f709e893187d301aa5458b2248db9f22bd1< bb61224f6abc8e71bfdf06d7c984e23460875f5baffected
a3d93f709e893187d301aa5458b2248db9f22bd1< 193b5a1c6c67c36b430989dc063fe7ea4e200a33affected
a3d93f709e893187d301aa5458b2248db9f22bd1< 7130a87ca32396eb9bf48b71a2d42259ae44c6c7affected
a3d93f709e893187d301aa5458b2248db9f22bd1< 3936e8714907cd55e37c7cc50e50229e4a9042e8affected
a3d93f709e893187d301aa5458b2248db9f22bd1< 980663f1d189eedafd18d80053d9cf3e2ceb5c8caffected
a3d93f709e893187d301aa5458b2248db9f22bd1< 28df4646ad8b433340772edc90ca709cdefc53e2affected
a3d93f709e893187d301aa5458b2248db9f22bd1< 7ee29facd8a9c5a26079148e36bcf07141b3a6bcaffected
… +10 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-52566

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nilfs_dat_translate() fails. If the reference count hits 0 and its owner page gets unlocked, bh may be freed. However, bh->b_page is dereferenced to put the page after that, which may result in a use-after-free bug. This patch moves the release operation after unlocking and putting the page. NOTE: The function in question is only called in GC, and in combination with current userland tools, address translation using DAT does not occur in that function, so the code path that causes this issue will not be executed. However, it is possible to run that code path by intentionally modifying the userland GC library or by calling the GC ioctl directly. [konishi.ryusuke@gmail.com: NOTE added to the commit log]
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，该漏洞源于内存释放后重用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux a3d93f709e893187d301aa5458b2248db9f22bd1 ~ fb1084e63ee56958b0a56e17a50a4fd86445b9c1 -
LinuxLinux 2.6.30 -

II. Public POCs for CVE-2023-52566

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-52566

请登录查看更多情报信息。

Other References for CVE-2023-52566 (7)

Same Patch Batch · Linux · 2024-03-02 · 57 CVEs total

CVE-2023-52562mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy()
CVE-2023-52581netfilter: nf_tables: fix memleak when more than 255 elements expired
CVE-2023-52574team: fix null-ptr-deref when team device type is changed
CVE-2023-52578net: bridge: use DEV_STATS_INC()
CVE-2023-52577dccp: fix dccp_v4_err()/dccp_v6_err() again
CVE-2023-52576x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer()
CVE-2023-52580net/core: Fix ETH_P_1588 flow dissector
CVE-2023-52565media: uvcvideo: Fix OOB read
CVE-2023-52564Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux"
CVE-2023-52563drm/meson: fix memory leak on ->hpd_notify callback
CVE-2023-52567serial: 8250_port: Check IRQ data before use
CVE-2023-52561arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved
CVE-2023-52560mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions()
CVE-2023-52559iommu/vt-d: Avoid memory allocation in iommu_suspend()
CVE-2023-52518Bluetooth: hci_codec: Fix leaking content of local_codecs
CVE-2023-52532net: mana: Fix TX CQE error handling
CVE-2023-52531wifi: iwlwifi: mvm: Fix a memory corruption issue
CVE-2023-52530wifi: mac80211: fix potential key use-after-free
CVE-2023-52529HID: sony: Fix a potential memory leak in sony_probe()
CVE-2023-52528net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg

Showing top 20 of 57 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2023-52566

No comments yet

Leave a comment