CVE-2023-52600: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: jfs: fix uaf in jfs_evict_inode When the execution of diMount(ipimap) fails, the object ipimap that has been released may be accessed in diFreeSpecial(). Asynchronous ipimap release occurs when rcu_core() calls jfs_free_node(). Therefore, when diMount(ipimap) fails, sbi->ipimap should not be initialized as ipimap.

Affected products

• Linux Linux Kernel: before 4.19.307 (fixed in 4.19.307); from 4.20, before 5.4.269 (fixed in 5.4.269); from 5.5, before 5.10.210 (fixed in 5.10.210); from 5.11, before 5.15.149 (fixed in 5.15.149); from 5.16, before 6.1.77 (fixed in 6.1.77); from 6.2, before 6.6.16 (fixed in 6.6.16); …

Published 2024-03-06. Last modified 2026-08-04.