VULNERABILITY INTELLIGENCE
CVE-2023-34256
CVSS score5.5 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2023-05-31
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated "When modifying the block device while it is mounted by the filesystem" access.
Weakness classification
- nvd@nist.gov: CWE-125
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-125
Primary references
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Mailing List, Patch
- cve@mitre.org — Mailing List, Patch
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Patch
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch