← CVE Intelligence

CVE-2023-53683

fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() PUBLISHED

Description (CNA)

In the Linux kernel, the following vulnerability has been resolved: fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

Affected (CNA)

Vendor / productVersions
Linux / Linuxaffected f62f5ee63052324ad94dd05091743d9e09f72070 before 61af77acd039ffd221bf7adf0dc95d0a4d377505; affected ab778439c6fa0071698b62a351f79d319fd72c53 before c074913b12db3632b11588b31bbfb0fa80a0a1c9; affected 781fa141414ef18b52f15037497155f80bf0ecab before a75d9211a07fed513c08c5d4861c4a36ac6a74fe; affected 1f881d9201f6e0a917004a14329f9ff3d0bfa1e5 before c8daee66585897a4c90d937c91e762100237bff9; affected 48d9e2e6de01ed35e965eb549758a837c07b601d before 37cab61a52d6f42b2d961c51bcf369f09e235fb5; affected 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb before 48960a503fcec76d3f72347b7e679dda08ca43be; affected 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb before 3a9d68d84b2e41ba3f2a727b36f035fad6800492; affected 55d1cbbbb29e6656c662ee8f73ba1fc4777532eb before 81b21c0f0138ff5a499eafc3eb0578ad2a99622c; affected 4.14.303 before 4.14.316; affected 4.19.270 before 4.19.284; affected 5.4.229 before 5.4.244; affected 5.10.163 before 5.10.181; affected 5.15.87 before 5.15.113
Linux / Linuxaffected 5.16; unaffected 0 before 5.16; unaffected 4.14.316 through 4.14.*; unaffected 4.19.284 through 4.19.*; unaffected 5.4.244 through 5.4.*; unaffected 5.10.181 through 5.10.*; unaffected 5.15.113 through 5.15.*; unaffected 6.1.30 through 6.1.*; unaffected 6.3.4 through 6.3.*; unaffected 6.4 through *

CWE

No CWE identifiers supplied.

References