CVE-2023-52760

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to a use-after-free vulnerability in the gfs2 file system, specifically in the gfs2 put super() function. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information. The problem arises when the quota is not properly cleaned up by gfs2 quota cleanup(), leading to the freeing of struct gfs2 sbd before the gfs2 qd dealloc callback has run for all gfs2 quota data objects, resulting in a use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.