CVE-2023-53091
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
02/05/2025
Last modified:
02/05/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ext4: update s_journal_inum if it changes after journal replay<br />
<br />
When mounting a crafted ext4 image, s_journal_inum may change after journal<br />
replay, which is obviously unreasonable because we have successfully loaded<br />
and replayed the journal through the old s_journal_inum. And the new<br />
s_journal_inum bypasses some of the checks in ext4_get_journal(), which<br />
may trigger a null pointer dereference problem. So if s_journal_inum<br />
changes after the journal replay, we ignore the change, and rewrite the<br />
current journal_inum to the superblock.