CVE-2023-52640— fs/ntfs3: Fix oob in ntfs_listxattr
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationAffected Version Matrix 12
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | 4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< a585faf0591548fe0920641950ebfa8a6eefe1cd | affected |
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 6ed6cdbe88334ca3430c5aee7754dc4597498dfb | affected | ||
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 52fff5799e3d1b5803ecd2f5f19c13c65f4f7b23 | affected | ||
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 0830c5cf19bdec50d0ede4755ddc463663deb21c | affected | ||
4534a70b7056fd4b9a1c6db5a4ce3c98546b291e< 731ab1f9828800df871c5a7ab9ffe965317d3f15 | affected | ||
5.15 | affected | ||
< 5.15 | unaffected | ||
5.15.150≤ 5.15.* | unaffected | ||
| … +4 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-52640
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
fs/ntfs3: Fix oob in ntfs_listxattr
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix oob in ntfs_listxattr The length of name cannot exceed the space occupied by ea.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于允许name的长度超过ea所占用的空间。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-52640
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-52640
请登录查看更多情报信息。
Other References for CVE-2023-52640 (4)
Same Patch Batch · Linux · 2024-04-03 · 94 CVEs total
| CVE-2024-26760 | 9.8 CRITICAL | scsi: target: pscsi: Fix bio_put() for error case |
| CVE-2024-26779 | 8.8 HIGH | wifi: mac80211: fix race condition on enabling fast-xmit |
| CVE-2024-26689 | 8.8 HIGH | ceph: prevent use-after-free in encode_cap_msg() |
| CVE-2024-26692 | 8.3 HIGH | smb: Fix regression in writes when non-standard maximum write size negotiated |
| CVE-2024-26736 | 8.1 HIGH | afs: Increase buffer size in afs_update_volume_status() |
| CVE-2024-26718 | 7.8 HIGH | dm-crypt, dm-verity: disable tasklets |
| CVE-2024-26728 | 7.8 HIGH | drm/amd/display: fix null-pointer dereference on edid reading |
| CVE-2023-52637 | 7.8 HIGH | can: j1939: Fix UAF in j1939_sk_match_filter during setsockopt(SO_J1939_FILTER) |
| CVE-2024-26704 | 7.8 HIGH | ext4: fix double-free of blocks due to wrong extents moved_len |
| CVE-2024-26699 | 7.8 HIGH | drm/amd/display: Fix array-index-out-of-bounds in dcn35_clkmgr |
| CVE-2024-26712 | 7.8 HIGH | powerpc/kasan: Fix addr error caused by page alignment |
| CVE-2024-26706 | 7.8 HIGH | parisc: Fix random data corruption from exception handler |
| CVE-2024-26697 | 7.8 HIGH | nilfs2: fix data corruption in dsync block recovery for small block sizes |
| CVE-2024-26737 | 7.8 HIGH | bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel |
| CVE-2024-26748 | 7.8 HIGH | usb: cdns3: fix memory double free when handle zero packet |
| CVE-2024-26773 | 7.8 HIGH | ext4: avoid allocating blocks from corrupted group in ext4_mb_try_best_found() |
| CVE-2024-26772 | 7.8 HIGH | ext4: avoid allocating blocks from corrupted group in ext4_mb_find_by_goal() |
| CVE-2024-26766 | 7.8 HIGH | IB/hfi1: Fix sdma.h tx->num_descs off-by-one error |
| CVE-2024-26739 | 7.8 HIGH | net/sched: act_mirred: don't override retval if we already lost the skb |
| CVE-2024-26759 | 7.8 HIGH | mm/swap: fix race when skipping swapcache |
Showing top 20 of 94 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux
- CVE-2026-74733
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock - CVE-2026-74732
drm/amd/display: Check for tg ops in dce110_set_avmute - CVE-2026-74731
sched_ext: Skip sub-disable teardown for never-linked sub-sc - CVE-2026-74730
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call - CVE-2026-74729
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_
Same vendor: Linux
- CVE-2026-74733
gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock - CVE-2026-74732
drm/amd/display: Check for tg ops in dce110_set_avmute - CVE-2026-74731
sched_ext: Skip sub-disable teardown for never-linked sub-sc - CVE-2026-74730
NFS: Pin the 'struct nfs_server' during a FREE_STATEID call - CVE-2026-74729
soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_
V. Comments for CVE-2023-52640
No comments yet