CVE Feed

    Dashboard / CVE / CVE-2023-52436

    CVE-2023-52436

    In the Linux kernel, the following vulnerability has been resolved: f2fs: explicitly null-terminate the xattr list When setting an xattr, explicitly null-terminate the xattr list. This eliminates the fragile assumption that the unused xattr space is always zeroed.

    Published:Feb 20, 2024
    Last Modified:Jul 11, 2025
    EPS:Feb 20, 2024
    EPSS Score:0.00011
    CVSS Score:7.8

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-170 Improper Null Termination

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a
    https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135
    https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36
    https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11
    https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52
    https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a
    https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564
    https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea
    https://git.kernel.org/stable/c/12cf91e23b126718a96b914f949f2cdfeadc7b2a
    https://git.kernel.org/stable/c/16ae3132ff7746894894927c1892493693b89135
    https://git.kernel.org/stable/c/2525d1ba225b5c167162fa344013c408e8b4de36
    https://git.kernel.org/stable/c/32a6cfc67675ee96fe107aeed5af9776fec63f11
    https://git.kernel.org/stable/c/3e47740091b05ac8d7836a33afd8646b6863ca52
    https://git.kernel.org/stable/c/5de9e9dd1828db9b8b962f7ca42548bd596deb8a
    https://git.kernel.org/stable/c/e26b6d39270f5eab0087453d9b544189a38c8564
    https://git.kernel.org/stable/c/f6c30bfe5a49bc38cae985083a11016800708fea
    https://lists.debian.org/debian-lts-announce/2024/06/msg00016.html
    https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High