CVE-2023-53091

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-53091

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: ext4: update s_journal_inum if it changes after journal replay When mounting a crafted ext4 image, s_journal_inum may change after journal replay, which is obviously unreasonable because we have successfully loaded and replayed the journal through the old s_journal_inum. And the new s_journal_inum bypasses some of the checks in ext4_get_journal(), which may trigger a null pointer dereference problem. So if s_journal_inum changes after the journal replay, we ignore the change, and rewrite the current journal_inum to the superblock.

References
Link Resource
https://git.kernel.org/stable/c/3039d8b8692408438a618fac2776b629852663c3 Patch
https://git.kernel.org/stable/c/499fef2030fb754c68b1c7cb3a799a3bc1d0d925 Patch
https://git.kernel.org/stable/c/70e66bdeae4d0f7c8e87762f425b68aedd5e8955 Patch
https://git.kernel.org/stable/c/ee0c5277d4fab920bd31345c49e193ecede9ecef Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

12 Nov 2025, 21:04

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/3039d8b8692408438a618fac2776b629852663c3 - () https://git.kernel.org/stable/c/3039d8b8692408438a618fac2776b629852663c3 - Patch
References () https://git.kernel.org/stable/c/499fef2030fb754c68b1c7cb3a799a3bc1d0d925 - () https://git.kernel.org/stable/c/499fef2030fb754c68b1c7cb3a799a3bc1d0d925 - Patch
References () https://git.kernel.org/stable/c/70e66bdeae4d0f7c8e87762f425b68aedd5e8955 - () https://git.kernel.org/stable/c/70e66bdeae4d0f7c8e87762f425b68aedd5e8955 - Patch
References () https://git.kernel.org/stable/c/ee0c5277d4fab920bd31345c49e193ecede9ecef - () https://git.kernel.org/stable/c/ee0c5277d4fab920bd31345c49e193ecede9ecef - Patch
CWE CWE-476
First Time Linux linux Kernel
Linux

05 May 2025, 20:54

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ext4: actualizar s_journal_inum si cambia después de la reproducción del diario. Al montar una imagen ext4 manipulada, s_journal_inum puede cambiar después de la reproducción del diario, lo cual es obviamente irrazonable porque hemos cargado y reproducido correctamente el diario a través del antiguo s_journal_inum. Y el nuevo s_journal_inum omite algunas de las comprobaciones en ext4_get_journal(), lo que puede desencadenar un problema de desreferencia de puntero nulo. Por lo tanto, si s_journal_inum cambia después de la reproducción del diario, ignoramos el cambio y reescribimos el journal_inum actual en el superbloque.

02 May 2025, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-05-02 16:15

Updated : 2025-11-12 21:04

NVD link : CVE-2023-53091

Mitre link : CVE-2023-53091

CVE.ORG link : CVE-2023-53091

JSON object : View

Products Affected

linux

CWE
CWE-476

NULL Pointer Dereference