CVE-2023-52805: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds in diAlloc Currently there is not check against the agno of the iag while allocating new inodes to avoid fragmentation problem. Added the check which is required.

Affected products

• Linux Linux Kernel: before 4.14.331 (fixed in 4.14.331); from 4.15, before 4.19.300 (fixed in 4.19.300); from 4.20, before 5.4.262 (fixed in 5.4.262); from 5.5, before 5.10.202 (fixed in 5.10.202); from 5.11, before 5.15.140 (fixed in 5.15.140); from 5.16, before 6.1.64 (fixed in 6.1.64); …

Published 2024-05-21. Last modified 2026-06-17.