CVE-2023-52748

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-52748
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid format-overflow warning With gcc and W=1 option, there's a warning like this: fs/f2fs/compress.c: In function ‘f2fs_init_page_array_cache’: fs/f2fs/compress.c:1984:47: error: ‘%u’ directive writing between 1 and 7 bytes into a region of size between 5 and 8 [-Werror=format-overflow=] 1984 | sprintf(slab_name, "f2fs_page_array_entry-%u:%u", MAJOR(dev), MINOR(dev)); | ^~ String "f2fs_page_array_entry-%u:%u" can up to 35. The first "%u" can up to 4 and the second "%u" can up to 7, so total size is "24 + 4 + 7 = 35". slab_name's size should be 35 rather than 32.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/3eebe636cac53886bd5d1cdd55e082ec9e84983f Patch
https://git.kernel.org/stable/c/526dd7540a09ecf87b5f54f3ab4e0a2528f25a79 Patch
https://git.kernel.org/stable/c/6fca08fd3085253b48fcb1bd243a0a5e18821a00 Patch
https://git.kernel.org/stable/c/c041f5ddef00c731c541e00bc8ae97b8c84c682f Patch
https://git.kernel.org/stable/c/e0d4e8acb3789c5a8651061fbab62ca24a45c063 Patch
https://git.kernel.org/stable/c/e4088d7d8f1123006d46a42edf51b8c960a58ef9 Patch
https://git.kernel.org/stable/c/3eebe636cac53886bd5d1cdd55e082ec9e84983f Patch
https://git.kernel.org/stable/c/526dd7540a09ecf87b5f54f3ab4e0a2528f25a79 Patch
https://git.kernel.org/stable/c/6fca08fd3085253b48fcb1bd243a0a5e18821a00 Patch
https://git.kernel.org/stable/c/c041f5ddef00c731c541e00bc8ae97b8c84c682f Patch
https://git.kernel.org/stable/c/e0d4e8acb3789c5a8651061fbab62ca24a45c063 Patch
https://git.kernel.org/stable/c/e4088d7d8f1123006d46a42edf51b8c960a58ef9 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

23 Sep 2025, 19:16

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
References () https://git.kernel.org/stable/c/3eebe636cac53886bd5d1cdd55e082ec9e84983f - () https://git.kernel.org/stable/c/3eebe636cac53886bd5d1cdd55e082ec9e84983f - Patch
References () https://git.kernel.org/stable/c/526dd7540a09ecf87b5f54f3ab4e0a2528f25a79 - () https://git.kernel.org/stable/c/526dd7540a09ecf87b5f54f3ab4e0a2528f25a79 - Patch
References () https://git.kernel.org/stable/c/6fca08fd3085253b48fcb1bd243a0a5e18821a00 - () https://git.kernel.org/stable/c/6fca08fd3085253b48fcb1bd243a0a5e18821a00 - Patch
References () https://git.kernel.org/stable/c/c041f5ddef00c731c541e00bc8ae97b8c84c682f - () https://git.kernel.org/stable/c/c041f5ddef00c731c541e00bc8ae97b8c84c682f - Patch
References () https://git.kernel.org/stable/c/e0d4e8acb3789c5a8651061fbab62ca24a45c063 - () https://git.kernel.org/stable/c/e0d4e8acb3789c5a8651061fbab62ca24a45c063 - Patch
References () https://git.kernel.org/stable/c/e4088d7d8f1123006d46a42edf51b8c960a58ef9 - () https://git.kernel.org/stable/c/e4088d7d8f1123006d46a42edf51b8c960a58ef9 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE CWE-787

21 Nov 2024, 08:40

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux se ha resuelto la siguiente vulnerabilidad: f2fs: evitar aviso de desbordamiento de formato. Con la opción gcc y W=1, aparece un aviso como este: fs/f2fs/compress.c: En la función 'f2fs_init_page_array_cache': fs/f2fs /compress.c:1984:47: error: directiva '%u' escribiendo entre 1 y 7 bytes en una región de tamaño entre 5 y 8 [-Werror=format-overflow=] 1984 | sprintf(slab_name, "f2fs_page_array_entry-%u:%u", MAJOR(dev), MINOR(dev)); | ^~ La cadena "f2fs_page_array_entry-%u:%u" puede tener hasta 35. El primer "%u" puede tener hasta 4 y el segundo "%u" puede hasta 7, por lo que el tamaño total es "24 + 4 + 7 = 35". El tamaño de slab_name debe ser 35 en lugar de 32.
References () https://git.kernel.org/stable/c/3eebe636cac53886bd5d1cdd55e082ec9e84983f - () https://git.kernel.org/stable/c/3eebe636cac53886bd5d1cdd55e082ec9e84983f -
References () https://git.kernel.org/stable/c/526dd7540a09ecf87b5f54f3ab4e0a2528f25a79 - () https://git.kernel.org/stable/c/526dd7540a09ecf87b5f54f3ab4e0a2528f25a79 -
References () https://git.kernel.org/stable/c/6fca08fd3085253b48fcb1bd243a0a5e18821a00 - () https://git.kernel.org/stable/c/6fca08fd3085253b48fcb1bd243a0a5e18821a00 -
References () https://git.kernel.org/stable/c/c041f5ddef00c731c541e00bc8ae97b8c84c682f - () https://git.kernel.org/stable/c/c041f5ddef00c731c541e00bc8ae97b8c84c682f -
References () https://git.kernel.org/stable/c/e0d4e8acb3789c5a8651061fbab62ca24a45c063 - () https://git.kernel.org/stable/c/e0d4e8acb3789c5a8651061fbab62ca24a45c063 -
References () https://git.kernel.org/stable/c/e4088d7d8f1123006d46a42edf51b8c960a58ef9 - () https://git.kernel.org/stable/c/e4088d7d8f1123006d46a42edf51b8c960a58ef9 -

21 May 2024, 16:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-21 16:15

Updated : 2025-09-23 19:16

NVD link : CVE-2023-52748

Mitre link : CVE-2023-52748

CVE.ORG link : CVE-2023-52748

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write