CVE-2023-53862

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.1.0-rc7-syzkaller-00190-g97ee9d1c1696

Description The Linux kernel contains a flaw within the hfs module related to reference counting of hfs bnode structures. Specifically, a missing call to hfs bnode get() after finding a node in hfs bnode create leads to a premature decrement of the reference count in hfs bnode put(), triggering a kernel BUG. This occurs during file write operations, potentially impacting system stability. The issue was identified through Syzbot testing and involves a path where a node is allocated, used, and then its reference count is incorrectly decremented to zero before it is fully utilized. The vulnerable code is located in fs/hfs/bnode.c.

Recommendations Update the Linux kernel to a version after 6.1.0-rc7-syzkaller-00190-g97ee9d1c1696.