QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2023-52436

Back to search

CVE-2023-52436

Published: Feb 20, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

VendorProductVersions

Linux

Linux

affected
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 - < 16ae3132ff7746894894927c1892493693b89135
affected
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 - < 12cf91e23b126718a96b914f949f2cdfeadc7b2a
affected
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 - < 3e47740091b05ac8d7836a33afd8646b6863ca52
affected
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 - < 32a6cfc67675ee96fe107aeed5af9776fec63f11
affected
98e4da8ca301e062d79ae168c67e56f3c3de3ce4 - < 5de9e9dd1828db9b8b962f7ca42548bd596deb8a

+3 more versions

Linux

Linux

affected
3.8
unaffected
0 - < 3.8
unaffected
4.19.306 - <= 4.19.*
unaffected
5.4.268 - <= 5.4.*
unaffected
5.10.209 - <= 5.10.*

+5 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now