Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2023-52566: Linux kernel NILFS2 may crash during garbage collection
CVE-2023-52566 · published 2 years ago
Summary
The NILFS2 file system component in the Linux kernel can accidentally free memory it still needs when handling certain garbage‑collection tasks. This could cause a crash or instability if someone modifies the garbage‑collection tools or calls the function directly. Keep your systems updated with the latest Linux kernel releases that include the fix, and avoid custom changes to the garbage‑collection utilities.
What to do
- Update canonical linux-aws to version 4.4.0-1131.137.
- Update canonical linux-azure to version 4.15.0-1177.192~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-254.288~14.04.1.
- Update canonical linux to version 4.4.0-254.288.
- Update canonical linux-aws to version 4.4.0-1169.184.
- Update canonical linux-aws-hwe to version 4.15.0-1168.181~16.04.1.
- Update canonical linux-azure to version 4.15.0-1177.192~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1162.179~16.04.1.
- Update canonical linux-hwe to version 4.15.0-225.237~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1132.142.
- Update canonical linux-oracle to version 4.15.0-1131.142~16.04.1.
- Update canonical linux-fips to version 4.4.0-1101.108.
- Update canonical linux to version 4.15.0-225.237.
- Update canonical linux-aws to version 4.15.0-1168.181.
- Update canonical linux-aws-5.4 to version 5.4.0-1118.128~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1177.192.
- Update canonical linux-azure-5.4 to version 5.4.0-1123.130~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1162.179.
- Update canonical linux-gcp-5.4 to version 5.4.0-1122.131~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-171.189~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1065.70~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1152.157.
- Update canonical linux-oracle to version 4.15.0-1131.142.
- Update canonical linux-oracle-5.4 to version 5.4.0-1117.126~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1102.114~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2107.113.
- Update canonical linux-azure-fips to version 4.15.0-2086.92.
- Update canonical linux-fips to version 4.15.0-1123.134.
- Update canonical linux-gcp-fips to version 4.15.0-2070.75.
- Update canonical linux to version 5.4.0-171.189.
- Update canonical linux-aws to version 5.4.0-1118.128.
- Update canonical linux-aws-5.15 to version 5.15.0-1053.58~20.04.1.
- Update canonical linux-azure to version 5.4.0-1123.130.
- Update canonical linux-azure-5.15 to version 5.15.0-1056.64~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1078.84.
- Update canonical linux-gcp to version 5.4.0-1122.131.
- Update canonical linux-gcp-5.15 to version 5.15.0-1051.59~20.04.1.
- Update canonical linux-gkeop to version 5.4.0-1085.89.
- Update canonical linux-gkeop-5.15 to version 5.15.0-1036.42~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1065.70.
- Update canonical linux-ibm-5.15 to version 5.15.0-1046.49~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1048.54~20.04.1.
- Update canonical linux-iot to version 5.4.0-1030.31.
- Update canonical linux-kvm to version 5.4.0-1106.113.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-94.104~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1022.22~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1117.126.
- Update canonical linux-oracle-5.15 to version 5.15.0-1051.57~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1102.114.
- Update canonical linux-riscv-5.15 to version 5.15.0-1049.53~20.04.2.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1037.41.
- Update canonical linux-aws-fips to version 5.4.0-1118.128+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1123.130+fips1.
- Update canonical linux-fips to version 5.4.0-1092.102.
- Update canonical linux-gcp-fips to version 5.4.0-1122.131+fips1.
- Update canonical linux to version 5.15.0-94.104.
- Update canonical linux-aws to version 5.15.0-1053.58.
- Update canonical linux-azure to version 5.15.0-1056.64.
- Update canonical linux-azure-fde to version 5.15.0-1056.64.1.
- Update canonical linux-gcp to version 5.15.0-1051.59.
- Update canonical linux-gke to version 5.15.0-1050.55.
- Update canonical linux-gkeop to version 5.15.0-1036.42.
- Update canonical linux-ibm to version 5.15.0-1046.49.
- Update canonical linux-intel-iotg to version 5.15.0-1047.53.
- Update canonical linux-kvm to version 5.15.0-1050.55.
- Update canonical linux-lowlatency to version 5.15.0-94.104.
- Update canonical linux-nvidia to version 5.15.0-1044.44.
- Update canonical linux-nvidia-6.5 to version 6.5.0-1014.14.
- Update canonical linux-nvidia-tegra to version 5.15.0-1022.22.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1009.9.
- Update canonical linux-oracle to version 5.15.0-1051.57.
- Update canonical linux-raspi to version 5.15.0-1046.49.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1027.31.
- Update canonical linux-bluefield to version 5.15.0-1035.37.
- Update canonical linux-aws-fips to version 5.15.0-1053.58+fips1.
- Update canonical linux-fips to version 5.15.0-94.104+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1055.63+fips2.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1046.48.
- Update canonical linux-realtime to version 5.15.0-1054.60.
- Update debian linux to version 6.1.64-1.
- Update debian linux to version 6.5.6-1.
- Update linux kernel to version 6.5.6.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1131.137 Fix: upgrade to 4.4.0-1131.137
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1177.192~14.04.1 Fix: upgrade to 4.15.0-1177.192~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-254.288~14.04.1 Fix: upgrade to 4.4.0-254.288~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-254.288 Fix: upgrade to 4.4.0-254.288
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1169.184 Fix: upgrade to 4.4.0-1169.184
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1168.181~16.04.1 Fix: upgrade to 4.15.0-1168.181~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1177.192~16.04.1 Fix: upgrade to 4.15.0-1177.192~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1162.179~16.04.1 Fix: upgrade to 4.15.0-1162.179~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-225.237~16.04.1 Fix: upgrade to 4.15.0-225.237~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1132.142 Fix: upgrade to 4.4.0-1132.142
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1131.142~16.04.1 Fix: upgrade to 4.15.0-1131.142~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1101.108 Fix: upgrade to 4.4.0-1101.108
|
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-225.237 Fix: upgrade to 4.15.0-225.237
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1168.181 Fix: upgrade to 4.15.0-1168.181
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1118.128~18.04.1 Fix: upgrade to 5.4.0-1118.128~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1177.192 Fix: upgrade to 4.15.0-1177.192
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1123.130~18.04.1 Fix: upgrade to 5.4.0-1123.130~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1162.179 Fix: upgrade to 4.15.0-1162.179
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1122.131~18.04.1 Fix: upgrade to 5.4.0-1122.131~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-171.189~18.04.1 Fix: upgrade to 5.4.0-171.189~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1065.70~18.04.1 Fix: upgrade to 5.4.0-1065.70~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1152.157 Fix: upgrade to 4.15.0-1152.157
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1131.142 Fix: upgrade to 4.15.0-1131.142
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1117.126~18.04.1 Fix: upgrade to 5.4.0-1117.126~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1102.114~18.04.1 Fix: upgrade to 5.4.0-1102.114~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2107.113 Fix: upgrade to 4.15.0-2107.113
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2086.92 Fix: upgrade to 4.15.0-2086.92
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1123.134 Fix: upgrade to 4.15.0-1123.134
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2070.75 Fix: upgrade to 4.15.0-2070.75
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-171.189 Fix: upgrade to 5.4.0-171.189
|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1118.128 Fix: upgrade to 5.4.0-1118.128
|
Showing 50 of 160. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1053.58~20.04.1 Fix: upgrade to 5.15.0-1053.58~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1123.130 Fix: upgrade to 5.4.0-1123.130
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1056.64~20.04.1 Fix: upgrade to 5.15.0-1056.64~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1078.84 Fix: upgrade to 5.4.0-1078.84
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1122.131 Fix: upgrade to 5.4.0-1122.131
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1051.59~20.04.1 Fix: upgrade to 5.15.0-1051.59~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop |
< 5.4.0-1085.89 Fix: upgrade to 5.4.0-1085.89
|
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 |
< 5.15.0-1036.42~20.04.1 Fix: upgrade to 5.15.0-1036.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1065.70 Fix: upgrade to 5.4.0-1065.70
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1046.49~20.04.1 Fix: upgrade to 5.15.0-1046.49~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1048.54~20.04.1 Fix: upgrade to 5.15.0-1048.54~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-iot |
< 5.4.0-1030.31 Fix: upgrade to 5.4.0-1030.31
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1106.113 Fix: upgrade to 5.4.0-1106.113
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-94.104~20.04.1 Fix: upgrade to 5.15.0-94.104~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1022.22~20.04.1 Fix: upgrade to 5.15.0-1022.22~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1117.126 Fix: upgrade to 5.4.0-1117.126
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1051.57~20.04.1 Fix: upgrade to 5.15.0-1051.57~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1102.114 Fix: upgrade to 5.4.0-1102.114
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1049.53~20.04.2 Fix: upgrade to 5.15.0-1049.53~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1037.41 Fix: upgrade to 5.4.0-1037.41
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1118.128+fips1 Fix: upgrade to 5.4.0-1118.128+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1123.130+fips1 Fix: upgrade to 5.4.0-1123.130+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1092.102 Fix: upgrade to 5.4.0-1092.102
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1122.131+fips1 Fix: upgrade to 5.4.0-1122.131+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1053.58 Fix: upgrade to 5.15.0-1053.58
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1056.64 Fix: upgrade to 5.15.0-1056.64
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1056.64.1 Fix: upgrade to 5.15.0-1056.64.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1051.59 Fix: upgrade to 5.15.0-1051.59
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1036.42 Fix: upgrade to 5.15.0-1036.42
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1047.53 Fix: upgrade to 5.15.0-1047.53
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1050.55 Fix: upgrade to 5.15.0-1050.55
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-94.104 Fix: upgrade to 5.15.0-94.104
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1044.44 Fix: upgrade to 5.15.0-1044.44
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 |
< 6.5.0-1014.14 Fix: upgrade to 6.5.0-1014.14
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1022.22 Fix: upgrade to 5.15.0-1022.22
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1009.9 Fix: upgrade to 5.15.0-1009.9
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1051.57 Fix: upgrade to 5.15.0-1051.57
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1046.49 Fix: upgrade to 5.15.0-1046.49
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1027.31 Fix: upgrade to 5.15.0-1027.31
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1035.37 Fix: upgrade to 5.15.0-1035.37
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1053.58+fips1 Fix: upgrade to 5.15.0-1053.58+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-94.104+fips1 Fix: upgrade to 5.15.0-94.104+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1055.63+fips2 Fix: upgrade to 5.15.0-1055.63+fips2
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1046.48 Fix: upgrade to 5.15.0-1046.48
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1054.60 Fix: upgrade to 5.15.0-1054.60
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Debian:12 | debian | linux |
< 6.1.64-1 Fix: upgrade to 6.1.64-1
|
| Debian:13 | debian | linux |
< 6.5.6-1 Fix: upgrade to 6.5.6-1
|
| – | linux | linux_kernel |
>= 2.6.30, < 4.14.327 >= 4.15, < 4.19.296 >= 4.20, < 5.4.258 >= 5.5, < 5.10.198 >= 5.11, < 5.15.134 >= 5.16, < 6.1.56 >= 6.2, < 6.5.6 6.6 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Linux | linux | kernel |
>= 6.2.0, < 6.5.6 Fix: upgrade to 6.5.6
|
Original advisory text
nilfs2: fix potential use after free in nilfs_gccache_submit_read_data()
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nilfs_dat_translate() fails. If the reference count hits 0 and its owner page gets unlocked, bh may be freed. However, bh->b_page is dereferenced to put the page after that, which may result in a use-after-free bug. This patch moves the release operation after unlocking and putting the page. NOTE: The function in question is only called in GC, and in combination with current userland tools, address translation using DAT does not occur in that function, so the code path that causes this issue will not be executed. However, it is possible to run that code path by intentionally modifying the userland GC library or by calling the GC ioctl directly. [[email protected]: NOTE added to the commit log]
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/52xxx/CVE-2023-52566... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-52566 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://security-tracker.debian.org/tracker/CVE-2023-52566 Vendor Advisory
- https://git.kernel.org/stable/c/193b5a1c6c67c36b430989dc063fe7ea4e200a33 URL
- https://git.kernel.org/stable/c/28df4646ad8b433340772edc90ca709cdefc53e2 URL
- https://git.kernel.org/stable/c/3936e8714907cd55e37c7cc50e50229e4a9042e8 URL
- https://git.kernel.org/stable/c/7130a87ca32396eb9bf48b71a2d42259ae44c6c7 URL
- https://git.kernel.org/stable/c/7ee29facd8a9c5a26079148e36bcf07141b3a6bc URL
- https://git.kernel.org/stable/c/980663f1d189eedafd18d80053d9cf3e2ceb5c8c URL
- https://git.kernel.org/stable/c/bb61224f6abc8e71bfdf06d7c984e23460875f5b URL
- https://git.kernel.org/stable/c/fb1084e63ee56958b0a56e17a50a4fd86445b9c1 URL
- https://ubuntu.com/security/notices/USN-6777-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6777-4 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-52566 Third Party Advisory
- https://git.kernel.org/linus/7ee29facd8a9c5a26079148e36bcf07141b3a6bc Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-52566 Third Party Advisory
- https://ubuntu.com/security/notices/USN-6777-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6778-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-6777-2 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-416Use After Free
Timeline
Published2 Mar 2024
Updated3 Nov 2026
First seen11 Mar 2026
Sources
CVE-2023-52566 · OSV
CVE-2023-52566 · NVD
UBUNTU-CVE-2023-52566 · OSV
DEBIAN-CVE-2023-52566 · OSV
Track software like this
Free during beta