CVE-2023-2513

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors. The vulnerability is related to the incorrect calculation of available space for storing attributes in the ext4 xattr set entry() function. Exploitation of the vulnerability may allow an attacker to impact the confidentiality, integrity, and availability of data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.