PT-2025-40779

CVE-2023-53616

·

Published

2022-12-01

·

Updated

2026-10-21

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc7-syzkaller-00012-gca57f02295f1
Description The Linux kernel contained a flaw within the JFS (Journaled File System) implementation related to an invalid memory free in the diUnmount function. Specifically, the JFS IP(ipimap)->i imap structure was not being set to NULL after being freed, leading to a potential double-free condition if jfs remount() failed after freeing the memory. This issue was identified through fuzzing with syzbot. The double-free could occur if JFS IP(ipimap)->i imap was freed during a remount attempt but the subsequent diMount() operation failed.
Recommendations Update to Linux kernel version 6.1.0-rc7-syzkaller-00012-gca57f02295f1 or a later version that includes the fix.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
CLSA-2026-1773832495
CLSA-2026-1773872435
CLSA-2026-1775779453
SUSE-SU-2025:21040-1
SUSE-SU-2025:21052-1
SUSE-SU-2025:21056-1
SUSE-SU-2025:21064-1
SUSE-SU-2025:4057-1
SUSE-SU-2025:4111-1
SUSE-SU-2025:4128-1
SUSE-SU-2025:4132-1
SUSE-SU-2025:4139-1
SUSE-SU-2025:4140-1
SUSE-SU-2025:4141-1
SUSE-SU-2025:4149-1
SUSE-SU-2025:4301-1
SUSE-SU-2025:4320-1
Found an issue in the description? Have something to add? Feel free to write us 👾