cbcvebase.
CVE-2023-52760
published 2024-05-21

CVE-2023-52760: In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in gfs2_qd_dealloc In gfs2_put_super(), whether withdrawn or…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.27%
19.0th percentile
In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in gfs2_qd_dealloc In gfs2_put_super(), whether withdrawn or not, the quota should be cleaned up by gfs2_quota_cleanup(). Otherwise, struct gfs2_sbd will be freed before gfs2_qd_dealloc (rcu callback) has run for all gfs2_quota_data objects, resulting in use-after-free. Also, gfs2_destroy_threads() and gfs2_quota_cleanup() is already called by gfs2_make_fs_ro(), so in gfs2_put_super(), after calling gfs2_make_fs_ro(), there is no need to call them again.

Affected

15 ranges
VendorProductVersion rangeFixed in
debianlinux< linux 6.6.8-1 (forky)linux 6.6.8-1 (forky)
debianlinux-6.1< linux 6.6.8-1 (forky)linux 6.6.8-1 (forky)
linuxlinux
linuxlinux>= f66af88e33212b57ea86da2c5d66c0d9d5c46344 < 08a28272faa750d4357ea2cb48d2baefd778ea8108a28272faa750d4357ea2cb48d2baefd778ea81
linuxlinux>= f66af88e33212b57ea86da2c5d66c0d9d5c46344 < bdcb8aa434c6d36b5c215d02a9ef07551be25a37bdcb8aa434c6d36b5c215d02a9ef07551be25a37
linuxlinux_kernel< 6.1.976.1.97
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 6.6.8-16.6.8-1
linuxlinux_kernel>= 0 < 5.4.0-193.2135.4.0-193.213
linuxlinux_kernel>= 0 < 5.15.0-119.1295.15.0-119.129
linuxlinux_kernel>= 0 < 4.4.0-258.2924.4.0-258.292
linuxlinux_kernel>= 0 < 4.15.0-228.2404.15.0-228.240
linuxlinux_kernel>= 6.2 < 6.6.36.6.3
msrccbl2_kernel_5.15.167.1-2_on_cbl_mariner_2.0
msrccbl2_kernel_5.15.180.1-1_on_cbl_mariner_2.0

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
osv8.4HIGH
vendor_ubuntu8.4HIGH
vendor_debian7.8LOW
vendor_msrc7.8HIGH
vendor_redhat7.8HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.