CVE-2023-52770

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

f2fs: split initial and dynamic conditions for extent_cache

Let's allocate the extent_cache tree without dynamic conditions to avoid a

missing condition causing a panic as below.

# create a file w/ a compressed flag

# disable the compression

# panic while updating extent_cache

F2FS-fs (dm-64): Swapfile: last extent is not aligned to section

F2FS-fs (dm-64): Swapfile (3) is not align to section: 1) creat(), 2) ioctl(F2FS_IOC_SET_PIN_FILE), 3) fallocate(2097152 * N)

Adding 124996k swap on ./swap-file. Priority:0 extents:2 across:17179494468k

==================================================================

BUG: KASAN: null-ptr-deref in instrument_atomic_read_write out/common/include/linux/instrumented.h:101 [inline]

BUG: KASAN: null-ptr-deref in atomic_try_cmpxchg_acquire out/common/include/asm-generic/atomic-instrumented.h:705 [inline]

BUG: KASAN: null-ptr-deref in queued_write_lock out/common/include/asm-gener

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References