CVE-2023-2513: Use After Free
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled extra inode size for extended attributes.
Quoting the upstream commit below: "In the calculation formula, all values except sinodesize and iextrasize are fixed values. When iextrasize is the maximum value sinodesize - EXT4GOODOLDINODESIZE, minoffs is -4 and free is -8. The value overflows. As a result, the preceding issue is triggered when memcpy is executed."
Patch series: https://lore.kernel.org/all/20220616021358.2504451-1-libaokun1@huawei.com/
Upstream fix: https://github.com/torvalds/linux/commit/67d7d8ad99be
Other sources
A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw could allow a privileged local user to cause a system crash or other undefined behaviors.
Linux Kernel is vulnerable to a denial of service, caused by a use-after-free flaw in the ext4 filesystem when handling extra inode size for extended attributes. By sending a specially crafted request, a local authenticated attacker could exploit this vulnerability to cause the system to crash.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2513?
CVE-2023-2513 is a use-after-free vulnerability that can lead to potential data corruption and system instability.
How do I fix CVE-2023-2513?
To fix CVE-2023-2513, update your Linux kernel to version 6.0 or apply the latest patches from your distribution.
Which systems are affected by CVE-2023-2513?
CVE-2023-2513 affects multiple versions of the Linux kernel, specifically versions up to and including 5.19, as well as certain Red Hat Enterprise Linux versions.
What components of IBM are impacted by CVE-2023-2513?
CVE-2023-2513 impacts the IBM Security Verify Governance, Identity Manager software and virtual appliance components up to version ISVG 10.0.2.
What is the underlying issue in CVE-2023-2513?
The underlying issue in CVE-2023-2513 arises from the Linux kernel's ext4 filesystem improperly handling extra inode sizes for extended attributes.