CVE-2023-53683

Summary

In the Linux kernel, the following vulnerability has been resolved:

fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode()

syzbot is hitting WARN_ON() in hfsplus_cat_{read,write}_inode(), for crafted filesystem image can contain bogus length. There conditions are not kernel bugs that can justify kernel to panic.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxf62f5ee63052324ad94dd05091743d9e09f72070 < 61af77acd039ffd221bf7adf0dc95d0a4d377505affected
LinuxLinuxab778439c6fa0071698b62a351f79d319fd72c53 < c074913b12db3632b11588b31bbfb0fa80a0a1c9affected
LinuxLinux781fa141414ef18b52f15037497155f80bf0ecab < a75d9211a07fed513c08c5d4861c4a36ac6a74feaffected
LinuxLinux1f881d9201f6e0a917004a14329f9ff3d0bfa1e5 < c8daee66585897a4c90d937c91e762100237bff9affected
LinuxLinux48d9e2e6de01ed35e965eb549758a837c07b601d < 37cab61a52d6f42b2d961c51bcf369f09e235fb5affected
LinuxLinux55d1cbbbb29e6656c662ee8f73ba1fc4777532eb < 48960a503fcec76d3f72347b7e679dda08ca43beaffected
LinuxLinux55d1cbbbb29e6656c662ee8f73ba1fc4777532eb < 3a9d68d84b2e41ba3f2a727b36f035fad6800492affected
LinuxLinux55d1cbbbb29e6656c662ee8f73ba1fc4777532eb < 81b21c0f0138ff5a499eafc3eb0578ad2a99622caffected
LinuxLinux4.14.303 < 4.14.316affected
LinuxLinux4.19.270 < 4.19.284affected
LinuxLinux5.4.229 < 5.4.244affected
LinuxLinux5.10.163 < 5.10.181affected
LinuxLinux5.15.87 < 5.15.113affected
LinuxLinux5.16affected
LinuxLinux0 < 5.16unaffected
LinuxLinux4.14.316 <= 4.14.*unaffected
LinuxLinux4.19.284 <= 4.19.*unaffected
LinuxLinux5.4.244 <= 5.4.*unaffected
LinuxLinux5.10.181 <= 5.10.*unaffected
LinuxLinux5.15.113 <= 5.15.*unaffected
LinuxLinux6.1.30 <= 6.1.*unaffected
LinuxLinux6.3.4 <= 6.3.*unaffected
LinuxLinux6.4 <= *unaffected

Weaknesses

References