CVE-2023-53440

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix sysfs interface lifetime

The current nilfs2 sysfs support has issues with the timing of creation

and deletion of sysfs entries, potentially leading to null pointer

dereferences, use-after-free, and lockdep warnings.

Some of the sysfs attributes for nilfs2 per-filesystem instance refer to

metadata file "cpfile", "sufile", or "dat", but

nilfs_sysfs_create_device_group that creates those attributes is executed

before the inodes for these metadata files are loaded, and

nilfs_sysfs_delete_device_group which deletes these sysfs entries is

called after releasing their metadata file inodes.

Therefore, access to some of these sysfs attributes may occur outside of

the lifetime of these metadata files, resulting in inode NULL pointer

dereferences or use-after-free.

In addition, the call to nilfs_sysfs_create_device_group() is made during

the locking period of the semaphore "ns_sem" of nilfs object, so the

shrinke

Remediation

Check the references section for vendor advisories and patches from linux. Update linux_kernel to the latest patched version. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

Affected Products

References