Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gcing flag on page during block migration It needs to add missing gcing flag on page during block migration, in order to garantee migrated data be persisted during checkpoint, otherwise out-of-order persistency between data and node may cause data corruption after SPOR. Similar issue was fixed by commit 2d1fe8a86bf5 ("f2fs: fix to tag gcing flag on page during file defragment").
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | < 5.15.149 |
References
- https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54ddeMailing ListPatch
- https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44bMailing ListPatch
- https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515cMailing ListPatch
- https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136Mailing ListPatch
- https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3Mailing ListPatch
- https://git.kernel.org/stable/c/417b8a91f4e8831cadaf85c3f15c6991c1f54ddeMailing ListPatch
- https://git.kernel.org/stable/c/4961acdd65c956e97c1a000c82d91a8c1cdbe44bMailing ListPatch
- https://git.kernel.org/stable/c/7c972c89457511007dfc933814c06786905e515cMailing ListPatch
- https://git.kernel.org/stable/c/7ea0f29d9fd84905051be020c0df7d557e286136Mailing ListPatch
- https://git.kernel.org/stable/c/b8094c0f1aae329b1c60a275a780d6c2c9ff7aa3Mailing ListPatch
FAQ
What is CVE-2023-52588?
CVE-2023-52588 is a vulnerability with a CVSS score of 7.1 (HIGH). In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gcing flag on page during block migration It needs to add missing gcing flag on page during block migration, in o...
How severe is CVE-2023-52588?
CVE-2023-52588 has been rated HIGH with a CVSS base score of 7.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-52588?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel.