Linux Kernel ext2 Vulnerability in Page Alignment and DAX Handling by The Linux Foundation

CVE-2023-53323

What is CVE-2023-53323?

A vulnerability exists in the Linux kernel related to ext2 file systems where improper handling of page alignment in DAX (Direct Access) operations can lead to unexpected behaviors or crashes. Specifically, when a length value of zero is passed to the dax_zero_range() function, it results in a failure within ext2_get_blocks(), triggering a kernel bug. This can be exploited in environments utilizing filesystem DAX on persistent memory devices, posing a risk to application stability and data integrity.

References