CVE-2023-52770— Linux kernel 安全漏洞
一分钟漏洞结论
影响对象
Linux Linux
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于f2fs模块存在漏洞。
可能的 ATT&CK 技术 1 AI
T1498 · Network Denial of Service影响版本矩阵 10
| 厂商 | 产品 | 版本范围 | 状态 |
|---|---|---|---|
| Linux | Linux | 72840cccc0a1a0a0dc1bb27b669a9111be6d0f6a< 9de787139b0258a5dd1f498780c26d76b61d2958 |
affected |
72840cccc0a1a0a0dc1bb27b669a9111be6d0f6a< d83309e7e006cee8afca83523559017c824fbf7a |
affected | ||
72840cccc0a1a0a0dc1bb27b669a9111be6d0f6a< f803982190f0265fd36cf84670aa6daefc2b0768 |
affected | ||
4377b1d3b19e1369d094a94596211a9815ddbb04 |
affected | ||
6.1.29< 6.2 |
affected | ||
6.2 |
affected | ||
< 6.2 |
unaffected | ||
6.5.13≤ 6.5.* |
unaffected | ||
| … +2 条更多 | |||
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2023-52770 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
f2fs: split initial and dynamic conditions for extent_cache
来源: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved:
f2fs: split initial and dynamic conditions for extent_cache
Let's allocate the extent_cache tree without dynamic conditions to avoid a
missing condition causing a panic as below.
# create a file w/ a compressed flag
# disable the compression
# panic while updating extent_cache
F2FS-fs (dm-64): Swapfile: last extent is not aligned to section
F2FS-fs (dm-64): Swapfile (3) is not align to section: 1) creat(), 2) ioctl(F2FS_IOC_SET_PIN_FILE), 3) fallocate(2097152 * N)
Adding 124996k swap on ./swap-file. Priority:0 extents:2 across:17179494468k
==================================================================
BUG: KASAN: null-ptr-deref in instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]
BUG: KASAN: null-ptr-deref in atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]
BUG: KASAN: null-ptr-deref in queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline]
BUG: KASAN: null-ptr-deref in __raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [inline]
BUG: KASAN: null-ptr-deref in _raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295
Write of size 4 at addr 0000000000000030 by task syz-executor154/3327
CPU: 0 PID: 3327 Comm: syz-executor154 Tainted: G O 5.10.185 #1
Hardware name: emulation qemu-x86/qemu-x86, BIOS 2023.01-21885-gb3cc1cd24d 01/01/2023
Call Trace:
__dump_stack out/common/lib/dump_stack.c:77 [inline]
dump_stack_lvl+0x17e/0x1c4 out/common/lib/dump_stack.c:118
__kasan_report+0x16c/0x260 out/common/mm/kasan/report.c:415
kasan_report+0x51/0x70 out/common/mm/kasan/report.c:428
kasan_check_range+0x2f3/0x340 out/common/mm/kasan/generic.c:186
__kasan_check_write+0x14/0x20 out/common/mm/kasan/shadow.c:37
instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]
atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]
queued_write_lock out/common/include/asm-generic/qrwlock.h:92 [inline]
__raw_write_lock out/common/include/linux/rwlock_api_smp.h:211 [inline]
_raw_write_lock+0x5a/0x110 out/common/kernel/locking/spinlock.c:295
__drop_extent_tree+0xdf/0x2f0 out/common/fs/f2fs/extent_cache.c:1155
f2fs_drop_extent_tree+0x17/0x30 out/common/fs/f2fs/extent_cache.c:1172
f2fs_insert_range out/common/fs/f2fs/file.c:1600 [inline]
f2fs_fallocate+0x19fd/0x1f40 out/common/fs/f2fs/file.c:1764
vfs_fallocate+0x514/0x9b0 out/common/fs/open.c:310
ksys_fallocate out/common/fs/open.c:333 [inline]
__do_sys_fallocate out/common/fs/open.c:341 [inline]
__se_sys_fallocate out/common/fs/open.c:339 [inline]
__x64_sys_fallocate+0xb8/0x100 out/common/fs/open.c:339
do_syscall_64+0x35/0x50 out/common/arch/x86/entry/common.c:46
来源: CVE Program / CVE List V5
CVSS Information
N/A
来源: CVE Program / CVE List V5
Vulnerability Type
N/A
来源: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于f2fs模块存在漏洞。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
二、漏洞 CVE-2023-52770 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2023-52770 的情报信息
请登录查看更多情报信息。
CVE-2023-52770 其他参考 (3)
同批安全公告 · Linux · 2024-05-21 · 共 361 条
| CVE-2021-47427 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2021-47328 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-52732 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-52741 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2021-47232 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-52755 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2021-47378 | 9.8 CRITICAL | Linux kernel 安全漏洞 |
| CVE-2023-52769 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2021-47308 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-52801 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-52798 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-52846 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-52790 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-52776 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2021-47388 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2021-47390 | 8.8 HIGH | Linux kernel 安全漏洞 |
| CVE-2021-47352 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2023-52829 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2021-47240 | 8.4 HIGH | Linux kernel 安全漏洞 |
| CVE-2021-47244 | 8.2 HIGH | Linux kernel 安全漏洞 |
显示前 20 条，共 361 条。 查看全部 → →
IV. Related Vulnerabilities
V. Comments for CVE-2023-52770
暂无评论