CVE-2023-52900

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix general protection fault in nilfs_btree_insert()

If nilfs2 reads a corrupted disk image and tries to reads a b-tree node

block by calling __nilfs_btree_get_block() against an invalid virtual

block address, it returns -ENOENT because conversion of the virtual block

address to a disk block address fails. However, this return value is the

same as the internal code that b-tree lookup routines return to indicate

that the block being searched does not exist, so functions that operate on

that b-tree may misbehave.

When nilfs_btree_insert() receives this spurious 'not found' code from

nilfs_btree_do_lookup(), it misunderstands that the 'not found' check was

successful and continues the insert operation using incomplete lookup path

data, causing the following crash:

general protection fault, probably for non-canonical address

0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN

KASAN: null-ptr-deref in range [0x0

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References