CVE-2023-53222— jfs: jfs_dmap: Validate db_l2nbperpage while mounting
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-53222
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: jfs: jfs_dmap: Validate db_l2nbperpage while mounting In jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block number inside dbFree(). db_l2nbperpage, which is the log2 number of blocks per page, is passed as an argument to BLKTODMAP which uses it for shifting. Syzbot reported a shift out-of-bounds crash because db_l2nbperpage is too big. This happens because the large value is set without any validation in dbMount() at line 181. Thus, make sure that db_l2nbperpage is correct while mounting. Max number of blocks per page = Page size / Min block size => log2(Max num_block per page) = log2(Page size / Min block size) = log2(Page size) - log2(Min block size) => Max db_l2nbperpage = L2PSIZE - L2MINBLOCKSIZE
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于未验证db_l2nbperpage值，可能导致越界访问。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-53222
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-53222
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-09-15 · 210 CVEs total
| CVE-2022-50293 | btrfs: do not BUG_ON() on ENOMEM when dropping extent items for a range | |
| CVE-2023-53232 | mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data | |
| CVE-2023-53233 | net/smc: fix deadlock triggered by cancel_delayed_work_syn() | |
| CVE-2023-53234 | watchdog: Fix kmemleak in watchdog_cdev_register | |
| CVE-2023-53235 | drm/tests: helpers: Avoid a driver uaf | |
| CVE-2023-53236 | iommufd: Do not corrupt the pfn list when doing batch carry | |
| CVE-2023-53237 | drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini | |
| CVE-2023-53238 | phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() | |
| CVE-2023-53239 | drm/msm/mdp5: Add check for kzalloc | |
| CVE-2023-53240 | xsk: check IFF_UP earlier in Tx path | |
| CVE-2023-53241 | nfsd: call op_release, even when op_func returns an error | |
| CVE-2023-53242 | thermal/drivers/hisi: Drop second sensor hi3660 | |
| CVE-2022-50291 | kcm: annotate data-races around kcm->rx_psock | |
| CVE-2022-50292 | drm/msm/dp: fix bridge lifetime | |
| CVE-2022-50303 | drm/amdkfd: Fix double release compute pasid | |
| CVE-2022-50300 | btrfs: fix extent map use-after-free when handling missing device in read_one_chunk | |
| CVE-2022-50301 | iommu/omap: Fix buffer overflow in debugfs | |
| CVE-2022-50302 | lockd: set other missing fields when unlocking files | |
| CVE-2022-50299 | md: Replace snprintf with scnprintf | |
| CVE-2022-50304 | mtd: core: fix possible resource leak in init_mtd() |
Showing top 20 of 210 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
Same vendor: Linux
- CVE-2026-43500
rxrpc: Also unshare DATA/RESPONSE packets when paged frags a - CVE-2026-43475
scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT - CVE-2026-43474
fs: init flags_valid before calling vfs_fileattr_get - CVE-2026-43473
scsi: mpi3mr: Add NULL checks when resetting request and rep - CVE-2026-43472
unshare: fix unshare_fs() handling
V. Comments for CVE-2023-53222
No comments yet