CVE-2023-52604

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc3-syzkaller

Description The issue is caused when the value of lp becomes greater than CTLTREESIZE, which is the maximum size of stree. This results in an array-index-out-of-bounds error in the dbAdjTree function. The vulnerability was reported by Syzkaller and is identified by the error message "UBSAN: array-index-out-of-bounds in fs/jfs/jfs dmap.c:2867:6 index 196694 is out of range for type 's8[1365]' (aka 'signed char[1365]')".

Recommendations To resolve the issue, update the Linux kernel to a version that includes the patch for this vulnerability. If updating is not possible, consider adding a simple check to prevent the value of lp from exceeding CTLTREESIZE. As a temporary workaround, consider using WARN ON ONCE for lack of a cleaner option, as modified by Dave in Osama's patch.