UBUNTU-CVE-2023-45898
The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.
02 / AFFECTED SOFTWARE
Affected packages
29 explicit affected versions
1 explicit affected versions
7 explicit affected versions
26 explicit affected versions
1 explicit affected versions
37 explicit affected versions
10 explicit affected versions
10 explicit affected versions
13 explicit affected versions
37 explicit affected versions
8 explicit affected versions
4 explicit affected versions
8 explicit affected versions
23 explicit affected versions
7 explicit affected versions
33 explicit affected versions
16 explicit affected versions
12 explicit affected versions
6 explicit affected versions
38 explicit affected versions
51 explicit affected versions
13 explicit affected versions
10 explicit affected versions
13 explicit affected versions
1 explicit affected versions
10 explicit affected versions
10 explicit affected versions
1 explicit affected versions
8 explicit affected versions
21 explicit affected versions
13 explicit affected versions
5 explicit affected versions
7 explicit affected versions
12 explicit affected versions
44 explicit affected versions
26 explicit affected versions
23 explicit affected versions
5 explicit affected versions
26 explicit affected versions
12 explicit affected versions
4 explicit affected versions
4 explicit affected versions
16 explicit affected versions
9 explicit affected versions
12 explicit affected versions
13 explicit affected versions
7 explicit affected versions
2 explicit affected versions
2 explicit affected versions
18 explicit affected versions
3 explicit affected versions
16 explicit affected versions
43 explicit affected versions
1 explicit affected versions
11 explicit affected versions
35 explicit affected versions
12 explicit affected versions
6 explicit affected versions
12 explicit affected versions
50 explicit affected versions
12 explicit affected versions
12 explicit affected versions
7 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
The Linux kernel before 6.5.4 has an es1 use-after-free in fs/ext4/extents_status.c, related to ext4_es_insert_extent.
05 / REFERENCES
Further evidence
- https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.5.4
- https://git.kernel.org/linus/768d612f79822d30a1e7d132a4d4b05337ce42ec
- https://github.com/torvalds/linux/commit/768d612f79822d30a1e7d132a4d4b05337ce42ec
- https://lkml.org/lkml/2023/8/13/477
- https://lore.kernel.org/all/[email protected]/
- https://lore.kernel.org/lkml/CALcu4raD4h9coiyEBL4Bm0zjDwxC2CyPiTwsP3zFuhot6y9Beg@mail.gmail.com/
- https://lore.kernel.org/lkml/[email protected]/T/
- https://ubuntu.com/security/CVE-2023-45898
- https://ubuntu.com/security/notices/USN-6536-1
- https://ubuntu.com/security/notices/USN-6537-1
- https://ubuntu.com/security/notices/USN-6573-1
- https://www.cve.org/CVERecord?id=CVE-2023-45898
- https://www.spinics.net/lists/stable-commits/msg317086.html