CVE-2023-52566

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() In nilfs_gccache_submit_read_data(), brelse(bh) is called to drop the reference count of bh when the call to nilfs_dat_translate() fails. If the reference count hits 0 and its owner page gets unlocked, bh may be freed. However, bh->b_page is dereferenced to put the page after that, which may result in a use-after-free bug. This patch moves the release operation after unlocking and putting the page. NOTE: The function in question is only called in GC, and in combination with current userland tools, address translation using DAT does not occur in that function, so the code path that causes this issue will not be executed. However, it is possible to run that code path by intentionally modifying the userland GC library or by calling the GC ioctl directly. [konishi.ryusuke@gmail.com: NOTE added to the commit log]

• CWE-416

• https://git.kernel.org/stable/c/193b5a1c6c67c36b430989dc063fe7ea4e200a33Patch
• https://git.kernel.org/stable/c/28df4646ad8b433340772edc90ca709cdefc53e2Patch
• https://git.kernel.org/stable/c/3936e8714907cd55e37c7cc50e50229e4a9042e8Patch
• https://git.kernel.org/stable/c/7130a87ca32396eb9bf48b71a2d42259ae44c6c7Patch
• https://git.kernel.org/stable/c/7ee29facd8a9c5a26079148e36bcf07141b3a6bcPatch
• https://git.kernel.org/stable/c/980663f1d189eedafd18d80053d9cf3e2ceb5c8cPatch
• https://git.kernel.org/stable/c/bb61224f6abc8e71bfdf06d7c984e23460875f5bPatch
• https://git.kernel.org/stable/c/fb1084e63ee56958b0a56e17a50a4fd86445b9c1Patch
• https://git.kernel.org/stable/c/193b5a1c6c67c36b430989dc063fe7ea4e200a33Patch
• https://git.kernel.org/stable/c/28df4646ad8b433340772edc90ca709cdefc53e2Patch
• https://git.kernel.org/stable/c/3936e8714907cd55e37c7cc50e50229e4a9042e8Patch
• https://git.kernel.org/stable/c/7130a87ca32396eb9bf48b71a2d42259ae44c6c7Patch
• https://git.kernel.org/stable/c/7ee29facd8a9c5a26079148e36bcf07141b3a6bcPatch
• https://git.kernel.org/stable/c/980663f1d189eedafd18d80053d9cf3e2ceb5c8cPatch
• https://git.kernel.org/stable/c/bb61224f6abc8e71bfdf06d7c984e23460875f5bPatch
• https://git.kernel.org/stable/c/fb1084e63ee56958b0a56e17a50a4fd86445b9c1Patch

Published

Mar 2, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-52560In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52561In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52562In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52563In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52564In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52565In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2023-52567In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52568In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2023-52569In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-5257A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Wi…5.7
• CVE-2023-52570In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2023-52571In the Linux kernel, the following vulnerability has been re…7.1