CVE-2023-52436

{"dataType": "CVE_RECORD", "cveMetadata": {"cveId": "CVE-2023-52436", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2024-02-20T12:30:33.290Z", "datePublished": "2024-02-20T18:34:47.387Z", "dateUpdated": "2026-08-15T12:23:45.392Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T12:23:45.392Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: explicitly null-terminate the xattr list\n\nWhen setting an xattr, explicitly null-terminate the xattr list. This\neliminates the fragile assumption that the unused xattr space is always\nzeroed."}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable path is reached via local setxattr/lsetxattr/fsetxattr (or setfacl\u2192ACL xattrs) into f2fs_setxattr/__f2fs_setxattr; it is not reachable from the network stack or remote filesystem servers.\nAC:L - An attacker who can write xattrs on an f2fs inode can reliably invoke the buggy set path; exploitation does not depend on a race or other condition outside the attacker\u2019s influence once residual non-zero unused xattr bytes exist (common on flash/corrupt or previously dirty xattr regions).\nPR:L - user.* xattrs are enabled by default and only require an unprivileged caller with MAY_WRITE on their own file/dir (typical Android app on f2fs userdata); CAP_SYS_ADMIN is not required.\nUI:N - On a system where f2fs is already mounted (e.g., Android /data), the attacker triggers the bug directly via syscalls with no victim action such as mounting a malicious image.\nS:U - Impact stays within the host kernel\u2019s authority (local memory corruption / privilege boundary of the same OS); this is not a VM, IOMMU, or other cross-authority escape.\nC:H - An unterminated xattr list causes out-of-bounds reads while walking entries (historically KASAN slab-OOB in getxattr and leakage via listxattr), which can disclose arbitrary kernel memory when bounds checks are absent or bypassed.\nI:H - Out-of-bounds parsing of attacker-influenced leftover xattr bytes can corrupt adjacent kernel memory and is treated as enabling write/control-flow impact under the overestimate-severity rule for memory-corruption bugs.\nA:H - The same OOB walks have caused kernel page faults/oopses and hard failures in related f2fs xattr corruption bugs, so availability impact is a full kernel crash."}]}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/f2fs/xattr.c"], "versions": [{"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "16ae3132ff7746894894927c1892493693b89135", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "12cf91e23b126718a96b914f949f2cdfeadc7b2a", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "3e47740091b05ac8d7836a33afd8646b6863ca52", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "32a6cfc67675ee96fe107aeed5af9776fec63f11", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "5de9e9dd1828db9b8b962f7ca42548bd596deb8a", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "2525d1ba225b5c167162fa344013c408e8b4de36", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "f6c30bfe5a49bc38cae985083a11016800708fea", "status": "affected", "versionType": "git"}, {"version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "e26b6d39270f5eab0087453d9b544189a38c8564", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/f2fs/xattr.c"], "versions": [{"version": "3.8", "status": "affected"}, {"version": "0", "lessThan": "3.8", "status": "unaffected", "versionType": "semver"}, {"version": "4.19.306", "lessThanOrEqual": "4.19.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.4.268", "lessThanOrEqual": "5.4.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.209", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.148", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.74", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.13", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.7.1", "lessThanOrEqual": "6.7.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.8", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "4.19.306"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "5.4.268"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "5.10.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "5.15.148"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.1.74"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.6.13"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.7.1"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "3.8", "versionEndExcluding": "6.8"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135"}, {"url": "https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a"}, {"url": "https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52"}, {"url": "https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11"}, {"url": "https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a"}, {"url": "https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36"}, {"url": "https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea"}, {"url": "https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564"}], "title": "f2fs: explicitly null-terminate the xattr list", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52436", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-21T20:39:15.806517Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:23:01.871Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.676Z"}, "title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}]}]}, "dataVersion": "5.2"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea", "tags": ["x_transferred"]}, {"url": "https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html", "tags": ["x_transferred"]}, {"url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.676Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-52436", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-21T20:39:15.806517Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:12.599Z"}, "title": "CISA ADP Vulnrichment"}], "cna": {"title": "f2fs: explicitly null-terminate the xattr list", "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 7.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "AV:L - The vulnerable path is reached via local setxattr/lsetxattr/fsetxattr (or setfacl\u2192ACL xattrs) into f2fs_setxattr/__f2fs_setxattr; it is not reachable from the network stack or remote filesystem servers.\nAC:L - An attacker who can write xattrs on an f2fs inode can reliably invoke the buggy set path; exploitation does not depend on a race or other condition outside the attacker\u2019s influence once residual non-zero unused xattr bytes exist (common on flash/corrupt or previously dirty xattr regions).\nPR:L - user.* xattrs are enabled by default and only require an unprivileged caller with MAY_WRITE on their own file/dir (typical Android app on f2fs userdata); CAP_SYS_ADMIN is not required.\nUI:N - On a system where f2fs is already mounted (e.g., Android /data), the attacker triggers the bug directly via syscalls with no victim action such as mounting a malicious image.\nS:U - Impact stays within the host kernel\u2019s authority (local memory corruption / privilege boundary of the same OS); this is not a VM, IOMMU, or other cross-authority escape.\nC:H - An unterminated xattr list causes out-of-bounds reads while walking entries (historically KASAN slab-OOB in getxattr and leakage via listxattr), which can disclose arbitrary kernel memory when bounds checks are absent or bypassed.\nI:H - Out-of-bounds parsing of attacker-influenced leftover xattr bytes can corrupt adjacent kernel memory and is treated as enabling write/control-flow impact under the overestimate-severity rule for memory-corruption bugs.\nA:H - The same OOB walks have caused kernel page faults/oopses and hard failures in related f2fs xattr corruption bugs, so availability impact is a full kernel crash."}]}], "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "16ae3132ff7746894894927c1892493693b89135", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "12cf91e23b126718a96b914f949f2cdfeadc7b2a", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "3e47740091b05ac8d7836a33afd8646b6863ca52", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "32a6cfc67675ee96fe107aeed5af9776fec63f11", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "5de9e9dd1828db9b8b962f7ca42548bd596deb8a", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "2525d1ba225b5c167162fa344013c408e8b4de36", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "f6c30bfe5a49bc38cae985083a11016800708fea", "versionType": "git"}, {"status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "lessThan": "e26b6d39270f5eab0087453d9b544189a38c8564", "versionType": "git"}], "programFiles": ["fs/f2fs/xattr.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "3.8"}, {"status": "unaffected", "version": "0", "lessThan": "3.8", "versionType": "semver"}, {"status": "unaffected", "version": "4.19.306", "versionType": "semver", "lessThanOrEqual": "4.19.*"}, {"status": "unaffected", "version": "5.4.268", "versionType": "semver", "lessThanOrEqual": "5.4.*"}, {"status": "unaffected", "version": "5.10.209", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.148", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.74", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.13", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.7.1", "versionType": "semver", "lessThanOrEqual": "6.7.*"}, {"status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/f2fs/xattr.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135"}, {"url": "https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a"}, {"url": "https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52"}, {"url": "https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11"}, {"url": "https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a"}, {"url": "https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36"}, {"url": "https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea"}, {"url": "https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: explicitly null-terminate the xattr list\n\nWhen setting an xattr, explicitly null-terminate the xattr list. This\neliminates the fragile assumption that the unused xattr space is always\nzeroed."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "4.19.306", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.4.268", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.209", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.148", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.74", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.13", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.7.1", "versionStartIncluding": "3.8"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.8", "versionStartIncluding": "3.8"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-15T12:23:45.392Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52436", "state": "PUBLISHED", "dateUpdated": "2026-08-15T12:23:45.392Z", "dateReserved": "2024-02-20T12:30:33.290Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2024-02-20T18:34:47.387Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/f2fs/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "16ae3132ff7746894894927c1892493693b89135", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "12cf91e23b126718a96b914f949f2cdfeadc7b2a", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "3e47740091b05ac8d7836a33afd8646b6863ca52", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "32a6cfc67675ee96fe107aeed5af9776fec63f11", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "5de9e9dd1828db9b8b962f7ca42548bd596deb8a", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "2525d1ba225b5c167162fa344013c408e8b4de36", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "f6c30bfe5a49bc38cae985083a11016800708fea", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}, {"lessThan": "e26b6d39270f5eab0087453d9b544189a38c8564", "status": "affected", "version": "af48b85b8cd3fbb12c9b6759c16db6d69c0b03da", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/f2fs/xattr.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "3.8"}, {"lessThan": "3.8", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "4.19.*", "status": "unaffected", "version": "4.19.306", "versionType": "semver"}, {"lessThanOrEqual": "5.4.*", "status": "unaffected", "version": "5.4.268", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.209", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.148", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.74", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.13", "versionType": "semver"}, {"lessThanOrEqual": "6.7.*", "status": "unaffected", "version": "6.7.1", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "6.8", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A7AEFD0-0681-4E8D-9074-27416D3EE94C", "versionEndExcluding": "4.19.306", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "35ADF607-EDCA-45AB-8FB6-9F2D40D47C0C", "versionEndExcluding": "5.4.268", "versionStartIncluding": "4.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "5D2E4F24-2FBB-4434-8598-2B1499E566B5", "versionEndExcluding": "5.10.209", "versionStartIncluding": "5.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "E25E1389-4B0F-407A-9C94-5908FF3EE88B", "versionEndExcluding": "5.15.148", "versionStartIncluding": "5.11.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F7DD9841-CE11-470D-A285-A2E8E0F6640D", "versionEndExcluding": "6.1.74", "versionStartIncluding": "5.16.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "74A1FFC7-19FA-450E-BC2D-2BBD2EBF0A5F", "versionEndExcluding": "6.6.13", "versionStartIncluding": "6.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "664EB721-F519-48BB-B1C8-897D5990CD78", "versionEndExcluding": "6.7.1", "versionStartIncluding": "6.7.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: explicitly null-terminate the xattr list\n\nWhen setting an xattr, explicitly null-terminate the xattr list. This\neliminates the fragile assumption that the unused xattr space is always\nzeroed."}, {"lang": "es", "value": "En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: f2fs: termina expl\u00edcitamente en nulo la lista xattr Al configurar un xattr, termina expl\u00edcitamente en nulo la lista xattr. Esto elimina la fr\u00e1gil suposici\u00f3n de que el espacio xattr no utilizado siempre se pone a cero."}], "id": "CVE-2023-52436", "lastModified": "2026-08-15T13:17:39.870", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-52436", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2024-02-21T20:39:15.806517Z", "version": "2.0.3"}}]}, "published": "2024-02-20T21:15:08.060", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: f2fs: explicitly null-terminate the xattr list", "id": "2265267", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2265267"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L", "status": "draft"}, "cwe": "CWE-170", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nf2fs: explicitly null-terminate the xattr list\nWhen setting an xattr, explicitly null-terminate the xattr list. This\neliminates the fragile assumption that the unused xattr space is always\nzeroed.", "A flaw was found in the Linux kernel\u2019s f2fs subsystem. When setting an xattr, explicitly null-terminate the xattr list. This eliminates the assumption that the unused xattr space is always zeroed."], "name": "CVE-2023-52436", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2024-02-20T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-52436\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-52436\nhttps://lore.kernel.org/linux-cve-announce/2024022056-operative-cork-082c@gregkh/T/#u"], "statement": "Red Hat Enterprise Linux not affected.", "threat_severity": "Low"}

{}