Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-34256

An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.

Published

2023-05-31T20:15:10.817

Last Modified

2025-03-11T16:15:14.927

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.5 (MEDIUM)

Weaknesses

Type: Primary
CWE-125
Type: Secondary
CWE-125

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linux	linux_kernel	< 6.3.3	Yes
Operating System	suse	linux_enterprise	12.0	Yes
Operating System	suse	linux_enterprise	15.0	Yes
Operating System	suse	linux_enterprise	15.0	Yes
Operating System	debian	debian_linux	10.0	Yes

References

https://bugzilla.suse.com/show_bug.cgi?id=1211895 Issue Tracking, Patch, Third Party Advisory ([email protected])
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.3 Mailing List, Patch ([email protected])
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f04351888a83e595571de672e0a4a8b74f4fb31 Mailing List, Patch ([email protected])
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory ([email protected])
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html Mailing List, Third Party Advisory ([email protected])
https://syzkaller.appspot.com/bug?extid=8785e41224a3afd04321 Mailing List, Patch ([email protected])
https://bugzilla.suse.com/show_bug.cgi?id=1211895 Issue Tracking, Patch, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.3 Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=4f04351888a83e595571de672e0a4a8b74f4fb31 Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/07/msg00030.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://lists.debian.org/debian-lts-announce/2023/10/msg00027.html Mailing List, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://syzkaller.appspot.com/bug?extid=8785e41224a3afd04321 Mailing List, Patch (af854a3a-2127-422b-91ae-364da2661108)